SocSage Security & Trust | UK Sovereign Azure SOC

UK Sovereign

Azure UK South — all data stays in the UK

Key Vault

All credentials in Azure Key Vault, HSM-backed

Zero Trust

Managed Identity only — no secrets in code

Open Trail

Every agent call logged, inspectable, replayable

Zero-trust architecture

No secrets in code. No keys in transit. No data leaves the UK.

Your M365 / GWS tenant

scoped OAuth consent

→

SocSage · Azure UK South

Managed Identity + Key Vault

Four scoped principals

GraphAPI / Sentinel / Azure RM / Defender

→

Per-tenant Key Vault

HSM-backed, RBAC-enforced, audit-logged

Agent orchestration

Azure Functions + Container Apps

→

Reasoning trail

Azure Monitor, 7-year retention

LLM inference

Azure OpenAI · UK South · no retention

→

Human-in-the-loop

Slack / Teams / PagerDuty MFA

Data principles

Three rules, no exceptions.

Your data is yours.

We never use customer telemetry to train third-party models. Azure OpenAI contractually excludes it. Zep Cloud memory is per-tenant, never fleet-pooled without explicit opt-in.

Everything is logged.

Every agent action, every tool call, every HITL approval is captured in an append-only audit log. Retained for 7 years, exportable to your SIEM, tamper-evident with hash chains.

Nothing leaves the UK.

All storage, inference, and processing happens in Azure UK South. No cross-region replication. No fallback to EU or US. If you're a UK public-sector customer, we meet the data-sovereignty bar out of the box.

Explainable by default

Open the AI and look inside.

No black-box decisions. Every agent run emits a structured trace: which tools it called, what they returned, which D3FEND measure was selected, and why. Audit-ready on day one.