Every claim, weighed.
Every call, human.

Fulcrum is the AI-native readiness platform for security reviews: the AI maps your evidence against the framework, drafts your policies, and matches questionnaire answers to your controls. Every claim carries a weight, proven, indicated or open, and the judgment calls land on a person's desk.

Fulcrum · Evidence ledger
SOC 2 Type II
CC6.7
Data in transit
TLS enforced everywhere; key rotation on file
Proven
CC6.2
User provisioning
Tickets exist; approvals applied unevenly
Indicated
CC7.2
Monitoring
Alerting configured; no triage log on file
Open
CC9.1
Risk mitigation
Scope judgment: on a person's desk
Escalated
Illustrative specimen. Not client data.
Entered into evidence
SOC 2·ISO 27001·CPCSC·the questionnaires in between
§ 01The burden of proof

Your buyer doesn't weigh promises.

A security review is a burden-of-proof exercise. The questionnaire looks like paperwork; it reads like cross-examination. What stalls the deal isn't the question on the line. It's the one written in the margin.

Fulcrum answers the margin before it's written.

Exhibit A
Security questionnaire: excerpt, as reviewed
4.07Do you encrypt data at rest?
✓ Yes. AES-256 across all stores.
In the margin

Which keys? Who can reach them? When were they last rotated?

6.12Do you have an incident response plan?
✓ Yes. Plan attached.
In the margin

When did you last run it, and what broke?

§ 02The platform

Read. Draft. Match. Weigh.

Four movements of the same machine, each one ending in something you can show, not something you have to say.

01

Read

Reads the ask, whether framework, questionnaire or contract clause, and maps it to the controls you already run. What this buyer will actually press on.

02

Draft

Policies drafted from how you actually operate, not from a template bank. If your reviews run quarterly, the policy says quarterly.

03

Match

Every answer tied to a control, every control tied to the evidence behind it. When the follow-up comes, you can show your work.

04

Weigh

Every claim gets a weight, and the scale never rounds up. Anything that takes judgment leaves the machine for a person's desk.

§ 03The weight system

No claim without a weight.

Every entry in the ledger carries one of four marks. The mark is the product: the difference between an answer and an answer that holds under the follow-up.

Proven
weight

The evidence is on file and it holds. The only mark that makes a promise.

Indicated
weight

The signals point there, but the file doesn't close the question. The mark says so.

Open
weight

Nothing on file yet. It stays stamped open until there is. Nothing ships quietly.

Escalated
→ off the scale, to a desk

A judgment, not a lookup. It leaves the scale entirely and lands on a person's desk.

§ 04In practice

A deal, from questionnaire to audit day.

Day 0

The questionnaire lands

Three hundred questions, six weeks to close. Fulcrum reads it against your stack the same afternoon: what's being asked, which controls answer it, and where the file is thin.

Day 2

The first ledger comes back

Every answer matched to a control. Every claim carrying a weight: proven, indicated or open. You know exactly what holds before your buyer asks.

Weeks 2 to 8

The gaps close in order of weight

Policies drafted from how you actually operate, evidence gathered where the ledger is open, and a person signing off on every judgment the machine can't make.

Audit day

The ledger is already bound

Audit-ready means the file is organised the way the auditor will ask for it. Nothing assembled at the last minute; nothing claimed that the file can't carry.

§ 05Principles

What the scale owes you.

Not a values page. Terms: the ones the platform is built to keep, written the way your buyer would want them written.

Terms of the scaleIn effect from first read
5.1

Weight is earned

Fulcrum never rounds a claim upward. Proven means a person saw the file and it held.

5.2

A person holds the pen

The machine reads, drafts and matches. It does not decide what your company claims. People do.

5.3

Prepared, not certified

Fulcrum gets you audit-ready. Independent auditors certify you. The independence is the point.

5.4

Quiet by default

NDA before a single document moves. Your file stays your file.

Fulcrum
Signed against the evidence
§ 06Start here

Put your own claims on the scale.

Request a walkthrough and bring the questionnaire you're stuck on. You'll leave with a first ledger of your own controls, weighed like everything else.

· NDA before any document moves
· A first read of your real controls
· No claim without a weight
Intake