Review the controls. Request the evidence.

Controls available in the platform

Access

Individual accounts, role checks, active vendor approval and explicit, expiring client project grants.

Media custody

Private R2 media storage and D1 workflow records. Client releases use frozen media copies, manifests and SHA-256 checksums.

Quality

Separate production, vendor QA and final staff QA. Project-specific score gates and independent reviewer calibration can be configured.

Consent

Project consent disclosures and submission acknowledgements are retained with recording submissions. New vendors accept a versioned declaration.

Delivery

Authenticated dataset downloads, original media, structured annotations and client acceptance or correction decisions.

Accountability

Submission versions, review records, access controls and an evidence register with review and expiry controls.

Validation and procurement

For your project, request a scoped pilot, QA rubric, data-flow and retention description, access review, consent documentation, sample export and delivery acceptance report. Technical controls must be assessed for the agreed scope and operating environment.

Recorded consent acknowledgements do not replace a client-approved participant consent process or rights assessment. Retention and deletion obligations must cover source data, releases and backups under the project agreement.

Validation status · October 21, 2026

• Local automated checks and synthetic rehearsals are available for staff review.
• Production concurrency capacity, uptime commitments and production recovery objectives require separate measurement.
• A real client pilot and iPhone/Android recording acceptance are not established by automated code tests.
• No independent penetration test, SOC 2 report or ISO certificate is claimed for SadiHub.
• Optional authenticator MFA is available in Account security. Enterprise SSO, client-specific data residency and enterprise SSO require separate supported configuration and verification. Owner-controlled native-administrator MFA enforcement is available; activation requires enrolled administrators.

Questions or security reports

Contact contact@sadigroup.co for security review, data-handling questions or to report a suspected issue. Do not include participant datasets in an initial email.