155 lines
6.4 KiB
HTML
155 lines
6.4 KiB
HTML
<!doctype html>
|
||
<html lang="en">
|
||
<head>
|
||
<meta charset="utf-8" />
|
||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||
<title>IF.TTT — B2B SaaS</title>
|
||
<meta name="description" content="IF.TTT for B2B SaaS: auditor-ready receipts, no-login proof surfaces, and dispute-friendly bundles for SOC 2 / ISO programs." />
|
||
<link rel="stylesheet" href="../../style.css" />
|
||
</head>
|
||
|
||
<body>
|
||
<header class="top">
|
||
<div class="wrap top__inner">
|
||
<a class="brand" href="../../" aria-label="IF.TTT home">
|
||
<img class="brand__logo" src="../../assets/if-logo-simple.svg" alt="" aria-hidden="true" />
|
||
<span class="brand__text">
|
||
<span class="brand__title">IF.TTT</span>
|
||
<span class="brand__sub">B2B SaaS (SOC 2 / ISO)</span>
|
||
</span>
|
||
</a>
|
||
|
||
<nav class="nav" aria-label="Primary">
|
||
<a href="../">Verticals</a>
|
||
<a href="../../#trust">Trust</a>
|
||
<a href="../../#verify">Verify</a>
|
||
<a href="../../governance/">Governance</a>
|
||
<a href="../../whitepaper/">Whitepaper</a>
|
||
<a href="../../about/">About</a>
|
||
<a href="../../api/">Developers</a>
|
||
</nav>
|
||
</div>
|
||
</header>
|
||
|
||
<main id="top">
|
||
<section class="hero">
|
||
<div class="wrap hero__grid">
|
||
<div class="hero__copy">
|
||
<p class="kicker">SaaS reality</p>
|
||
<h1>Audits are evidence requests with a deadline.</h1>
|
||
<p class="lede">
|
||
In B2B SaaS, the friction isn’t the control design. It’s proving the control existed at the right time, in the right scope, without
|
||
granting auditors full internal access.
|
||
</p>
|
||
|
||
<div class="panel">
|
||
<h3>Third‑party pressure</h3>
|
||
<ul class="list">
|
||
<li>Auditors want integrity-bound artifacts (not screenshots in shared drives).</li>
|
||
<li>Enterprise procurement wants reproducible proof without bespoke portals.</li>
|
||
<li>Post‑incident reviewers want “what did it say?” tied to “what did it see?”</li>
|
||
</ul>
|
||
</div>
|
||
|
||
<div class="panel" style="margin-top: 12px">
|
||
<h3>What IF.TTT provides</h3>
|
||
<div class="bw">
|
||
<div class="bw__row">
|
||
<div class="bw__k">No‑login</div>
|
||
<div class="bw__v">Stable URLs for trace + output + source, keyed by <code>shareId</code>.</div>
|
||
</div>
|
||
<div class="bw__row">
|
||
<div class="bw__k">Dispute‑ready</div>
|
||
<div class="bw__v">Offline bundles with expected hashes for later verification.</div>
|
||
</div>
|
||
<div class="bw__row">
|
||
<div class="bw__k">Black/white</div>
|
||
<div class="bw__v">Explicit “proves / does not prove” framing for auditor conversations.</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<aside class="hero__card" aria-label="Receipt-first process">
|
||
<div class="card">
|
||
<div class="card__media">
|
||
<img src="../../assets/red-team-doc-1024-559.jpg" alt="Dossier cover" loading="lazy" />
|
||
</div>
|
||
<div class="card__hdr">
|
||
<div class="badge badge--ok">RECEIPTS</div>
|
||
<div class="badge">AUDIT‑FRICTION</div>
|
||
</div>
|
||
<div class="card__body">
|
||
<ol class="steps">
|
||
<li class="step">
|
||
<div class="step__n">1</div>
|
||
<div class="step__b">
|
||
<div class="step__t">Hash the source</div>
|
||
<div class="step__d">Compute <code>source_sha256</code>.</div>
|
||
</div>
|
||
</li>
|
||
<li class="step">
|
||
<div class="step__n">2</div>
|
||
<div class="step__b">
|
||
<div class="step__t">Hash the output</div>
|
||
<div class="step__d">Compute <code>output_sha256</code>.</div>
|
||
</div>
|
||
</li>
|
||
<li class="step">
|
||
<div class="step__n">3</div>
|
||
<div class="step__b">
|
||
<div class="step__t">Publish the receipt</div>
|
||
<div class="step__d">Share a trace page with stable no‑login URLs.</div>
|
||
</div>
|
||
</li>
|
||
</ol>
|
||
</div>
|
||
</div>
|
||
</aside>
|
||
</div>
|
||
</section>
|
||
|
||
<section class="section section--alt">
|
||
<div class="wrap">
|
||
<h2>Artifacts for auditors</h2>
|
||
<p class="sub">The purpose is to make evidence portable and boring.</p>
|
||
<pre class="code"><code>Trace receipt: https://infrafabric.io/static/trace/<shareId>
|
||
Output (raw): https://infrafabric.io/static/dossier/<shareId>/download
|
||
Pack (HTML): https://infrafabric.io/static/pack/<shareId></code></pre>
|
||
</div>
|
||
</section>
|
||
</main>
|
||
|
||
<footer class="footer">
|
||
<div class="wrap footer__inner">
|
||
<div class="muted">If the evidence isn’t portable, the audit will be.</div>
|
||
<div class="muted">
|
||
<a href="../">Verticals</a> · <a href="../../governance/">Governance</a> · <a href="../../api/">Developers</a> ·
|
||
<a href="mailto:ds@infrafabric.io">ds@infrafabric.io</a> <span class="bottombar__sep">·</span> Danny Stocker
|
||
</div>
|
||
</div>
|
||
</footer>
|
||
|
||
<div class="bottombar" aria-label="Quick links">
|
||
<div class="wrap bottombar__inner">
|
||
<div class="bottombar__left">
|
||
<span class="bottombar__label">Sectors</span>
|
||
<a href="../public-sector/">Public Sector</a>
|
||
<a href="../enterprise/">Enterprise</a>
|
||
<a href="../research/">Research</a>
|
||
<a href="../professional-services/">Professional</a>
|
||
<span class="bottombar__sep">·</span>
|
||
<span class="bottombar__label">Industries</span>
|
||
<a href="../healthcare/">Healthcare</a>
|
||
<a href="../finance/">Financial</a>
|
||
<a href="../legal/">Legal</a>
|
||
</div>
|
||
<div class="bottombar__right">
|
||
<a href="../../api/">Developers</a>
|
||
<span class="bottombar__sep">|</span>
|
||
<a href="../../api/">API</a>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</body>
|
||
</html>
|