TZUR Impact — Security and Evaluation FAQ

Is this FedRAMP-authorized? No such authorization is claimed.
Is this a live AWS/GovCloud connection? No. It accepts synthetic examples and supplied fictional AWS Config JSON.
Where is it hosted? The current evaluation uses Sites/Cloudflare Workers and D1, not a verified GovCloud customer deployment.
Who authorizes? Qualified humans. Saved review dispositions are not authorization decisions.
Can I upload real system data? No. Synthetic and non-sensitive only.
Does a hash prove the evidence is trustworthy? No. It supports byte-integrity comparison, not source authenticity.
Does TZUR discover dependencies? This release follows supplied directed mappings; absent mappings are not discovered.
Who can see a saved case? The signed-in owner. Cross-user team sharing and enterprise RBAC are not implemented.
What production gaps remain? Live collection and permission validation; customer identity/access; independent security acceptance; operational monitoring, backup/restore and retention/deletion; validated mapping/scoring; support and commercial terms.
How long does it take? No guaranteed deployment or time-saving figure. Define milestones and success criteria in a scoped proposal.
How do we buy? Email hello@llcreativityllc.com to request evaluation, technical brief, procurement discussion or scoped proposal. No contract vehicle or approved prices are asserted.