# Procurement kit | Chainsaw

> Get the Chainsaw procurement kit — security architecture whitepaper, data-flow diagrams, compliance statements, and the CSA CAIQ pre-fill — by email.

Source: https://chain305.com/security/procurement/

---

Procurement

# Clear the Chainsaw security review without a call

The whitepaper, data-flow diagrams, compliance statements, and CAIQ pre-fill your security team needs to run the review. One zip, by email.

Document

For

Contains

Enterprise overview

VP Eng / CTO

What Chainsaw does, where it sits in your pipeline, what changes for your engineers on day 1.

Security architecture whitepaper

CISO / Security architecture

Tenancy model, encryption, signing, audit trail, network boundaries — with control-by-control reviewer language.

Data-flow diagrams

Data protection / Legal

Mermaid-rendered diagrams of every place customer data moves, from the proxy edge through the audit pipeline.

Compliance statements

Compliance / Legal

Precise, audit-ready language for SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, FedRAMP — clearly labelled where Chainsaw is designed against vs. attested vs. out of scope.

CSA CAIQ pre-fill (XLSX)

Cloud Security Alliance reviewers

160+ controls across 17 CSA families (AIS, AAC, BCR, CCC, CEK, DSI, DSP, GRC, HRS, IAM, IPY, IVS, LOG, SEF, STA, TVM, UEM), each row sourced back to a tracked path in the repo so your team can audit our work.

**Audited against:** none, today. **Designed against:** SOC 2 ISO 27001 HIPAA GDPR. Need an attestation as a contract pre-condition? Flag it on your first call.

## Email the kit

We'll send the kit to your inbox. Use a real work email — disposable inboxes are blocked by the form.

---

## Long form

The full text behind this page, including detail the page itself leaves out.

Procurement

### Clear the Chainsaw security review without a call

The whitepaper, data-flow diagrams, compliance statements, and CAIQ pre-fill your security team needs to run the review — one zip, by email. No call required first.

-   01 **Enterprise overview** VP Eng / CTO
    
    What Chainsaw does, where it sits in your pipeline, what changes for your engineers on day 1.
    
-   02 **Security architecture whitepaper** CISO / Security architecture
    
    Tenancy model, encryption, signing, audit trail, network boundaries — with control-by-control reviewer language.
    
-   03 **Data-flow diagrams** Data protection / Legal
    
    Mermaid-rendered diagrams of every place customer data moves, from the proxy edge through the audit pipeline.
    
-   04 **Compliance statements** Compliance / Legal
    
    Precise, audit-ready language for SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, FedRAMP — clearly labelled where Chainsaw is designed against vs. attested vs. out of scope.
    
-   05 **CSA CAIQ pre-fill (XLSX)** Cloud Security Alliance reviewers
    
    160+ controls across 17 CSA families (AIS, AAC, BCR, CCC, CEK, DSI, DSP, GRC, HRS, IAM, IPY, IVS, LOG, SEF, STA, TVM, UEM), each row sourced back to a tracked path in the repo so your team can audit our work.
    

**What we don't do:** over-claim. The compliance statements are explicit about what Chainsaw has been audited against (none, today) vs. designed against (SOC 2 ISO 27001 HIPAA GDPR). If a reviewer needs an attestation as a contract pre-condition, flag it on your first call so we can talk through timing.

#### Email the kit

We'll send the kit to your inbox. Use a real work email — disposable inboxes are blocked by the form.