Capability
GRC / IRM / ERM
Turn framework work into current proof, named owners, and business-facing risk decisions.
Request proof sampleLivePublic / indexed
What VALTY owns
Controls, evidence, audit workflow, and risk ownership. VALTY owns the proof/remediation layer, source coverage, buyer workflow, and visible business impact for this lane.
What remains customer-owned
Does not replace customer auditors, counsel, or required certification bodies.
Buyer path
CISO, compliance lead should route through `/access` with source page and requested wedge preserved in Attio.

Proof matrix
Capability proof requirements
Each capability page keeps the claim, source, confidence, and publication boundary visible before it asks a buyer to believe the outcome.
ClaimSourceConfidenceFreshness
Capability claimControls, evidence, audit workflow, and risk ownershipLivePublic / indexed
Evidence artifactControl evidence freshness, proof pack excerpts, audit workflow statusSource-linkedReviewed before publish
BoundaryDoes not replace customer auditors, counsel, or required certification bodies.Claim-reviewedQuarterly or on product change