Charter acts on your behalf. That has to be legible.
Every agent action is timestamped, attributed, and replayable. If Charter filed something, you can see exactly what was filed, when, and by which process.
- SOC 2 Type II
- Audited annually. Report available under NDA.
- Encryption
- AES-256 at rest, TLS 1.3 in transit.
- SSO and SCIM
- SAML 2.0 and OIDC. Directory-driven provisioning.
- Penetration testing
- Annual third-party test. Summary on request.
- Audit log
- Every action taken on your behalf, exportable.
- Data residency
- US regions. Sub-processor list published and versioned.
Replayable, not just logged.
A log that records “submitted application” is not accountability. Charter stores the determination that produced the obligation, the form set as it existed on the filing date, the exact payload submitted, and the agency response — so any filing can be reconstructed years later.
Nothing is filed without authorisation.
Charter acts as your authorised agent within a scope you set per property and per permit class. Anything outside that scope waits for approval. Authority can be revoked immediately and the audit log survives revocation.
Security review before a pilot?
Run an audit to see the product, then ask for the SOC 2 report, the sub-processor list, and the pen test summary.
Run a free audit