Trust and compliance

Rotapulse is a safety tool. Every claim on the homepage is tied to something you can inspect: a file in the repo, a test, a config value, a database policy. This page names each one.

Deterministic by default

HSE FRI scoring is pure, versioned, regression tested. Every number is reproducible from history.

  • Engine version 2026.04.2, pinned in src/lib/fri-engine/version.ts
  • 57 engine tests including worked RR446 examples
  • Every stored ShiftScore carries fri_version + profile_version for replay

AI narrates, never decides

The model explains and suggests. The deterministic engine re-validates every suggestion before you see it.

  • No LLM call on the scoring path. Scores are produced by pure TypeScript.
  • LLM suggestions pass through scoreShift() before surfacing in the UI
  • AI is off by default: requires platform switch (platform_config.ai_enabled) AND per-workspace opt-in

UK compliant, UK hosted

EU region Supabase, UK Vercel region, GDPR by design. Built for NHS, logistics, rail subcontractors, hospitality.

  • Supabase project in eu-west-2 (London)
  • Vercel regions locked to lhr1 (London) in vercel.json
  • Row-level security on every table, JWT-scoped by org_id (see policies in 0001_initial_schema.sql)

Runtime facts

What this instance reports about itself, live. If any of these look wrong for a UK customer, the deploy is misconfigured.

FRI engine version
2026.04.2
Default profile
general@1.0
Vercel region
lhr1

Locked in vercel.json

Supabase region
eu-west-2

Host: wyqbyfseuwqqadmfjvqg.supabase.co

Engine tests
57

Include HSE RR446 worked examples (rr446-examples, score, utils)

Ingest tests
253

14 test files: CSV, paste, column mapping, datetime, shift codes, schema guards

Total tests
417

Engine + ingest + billing + email + team grid

Code audit

The repository is private. Procurement teams, DPOs, and HSE auditors can request read access for a time-limited review. Email compliance@rotapulse.co.uk with your organisation name and what you need to verify. We respond within two working days.

An audit session gives you direct access to:

Legal backing

The UK/GDPR pillar above is supported by the following documents, available on request or at the links below.