What does the mark actually certify?

Nothing is certified. It states that Bitwise Lab is currently engaged on that product and answers for four properties inside it. It is a statement about a capability, not a certification and not a substitute for one.

Does it mean Bitwise Lab owns this product?

No. The product, the roadmap and the customer relationship belong to the company that owns it. The mark never implies ownership, which is why it never reads as a product byline.

How do I know the engagement is still current?

Ask the product owner, who can state what the engagement covers. The mark comes off when the engagement ends, because a trust mark that outlives the work behind it is worth less than no mark at all.

Does it cover the whole product?

It covers the scope of the engagement, which the product owner can state. Where a single pillar is the whole of it, you may see a variant such as Private AI by Bitwise Lab.

What Secured by Bitwise Lab Means

Secured by Bitwise Lab

If you followed this mark from a product, this page is the reason it exists. A trust badge that does not explain itself is decoration, and a procurement reviewer treats it as such.

What the mark says

That Bitwise Lab is currently engaged on that product, and answers for the four properties below inside it. It is a statement about a capability, not about ownership.

Security by design. Tenant isolation, encryption in transit and at rest, least privilege, and automated deprovisioning, as properties of the architecture.
Regulatory fit. The frameworks the product answers to, implemented as versioned data rather than code.
Private AI. Where the product uses AI, it can run where the data already lives, with nothing sent to a third-party API.
Immutable records. Where the product produces records that must not change silently, a closed permissioned ledger proves they did not.

Where a single pillar is the whole of the engagement, you may see a variant, for example Private AI by Bitwise Lab. Nothing else.

What the mark does not say

That we own the product. We do not. The product, the roadmap and the customer relationship belong to its owner.
That we operate it. We do not run your production.
That a certification exists. It is not ISO/IEC 27001, not SOC 2, and not a substitute for either.
That every part of the product was reviewed. It covers the scope of the engagement, which the product owner can state.

It is earned, and it comes off

The mark goes only on products where the engagement that backs it is current. When the engagement ends, the mark comes off, and that removal is written into the contract along with what happens on termination.

This is the whole point. A trust mark that outlives the work behind it is worth less than no mark at all, because the first person who checks and finds the work ended stops believing everything else on the page.

Verifying it

If you are reviewing a vendor and want the scope confirmed, ask the product owner first: they can state what the engagement covers. If you need it from us, ask directly and we will answer.

Questions we get asked

Q1. What does the mark actually certify?
Nothing is certified. It states that Bitwise Lab is currently engaged on that product and answers for four properties inside it. It is a statement about a capability, not a certification and not a substitute for one.
Q2. Does it mean Bitwise Lab owns this product?
No. The product, the roadmap and the customer relationship belong to the company that owns it. The mark never implies ownership, which is why it never reads as a product byline.
Q3. How do I know the engagement is still current?
Ask the product owner, who can state what the engagement covers. The mark comes off when the engagement ends, because a trust mark that outlives the work behind it is worth less than no mark at all.
Q4. Does it cover the whole product?
It covers the scope of the engagement, which the product owner can state. Where a single pillar is the whole of it, you may see a variant such as Private AI by Bitwise Lab.

Schedule a Meeting