Identity boundary
Privileged pilot APIs require a signed bearer token. Tenant membership and roles come from signed claims and cannot be asserted with free-form role headers.
TRUST & SECURITY
Evidence infrastructure should make its security boundary explicit.
EuroSetu is being hardened for customer-authorised ERP, MES, EMS, supplier and verifier data. This page states implemented controls and deliberately does not claim certifications we do not hold.
Implemented in the product
Least privilege
Marketing demo access is separate from pilot roles. Evidence verification and resolution require verifier/admin authority; contributor operations use separate roles.
Evidence integrity
Evidence and regulatory payloads use SHA-256 provenance. Regulatory decisions retain source/version metadata and fail closed when required information is unavailable.
Production deployment requirements
Customer deployments require an approved identity provider, database-enforced tenant isolation, encrypted transport and storage, secrets management, backup/restore validation, retention/deletion policy, audit logging and customer-specific access review. These controls must be verified in the deployment; this public page is not a certification statement.
DATA BOUNDARY
Demo: synthetic commercial rows + versioned public regulatory sources.
Pilot: customer-authorised scoped extracts only.
Production: tenant-scoped identity, storage and audit controls required.
Versioned public sources
Regulatory reference data is fetched from public distributions, hashed (SHA-256) and versioned. Counts and as-of dates below reflect the snapshots pinned in this deployment. Live quota balances have no public bulk export and are therefore never inferred — decisions fail closed when a balance is unavailable.
TARIC measures2,477 records · as of 2026-10-01 · daily delta mirror
EU customs data model272 data elements · as of 2026-10-01 · mirror
Steel safeguard 2026/145730 categories · 337 CN codes · as of 2026-09-30 · legal annex snapshot
CBAM default values13,365 records · as of 2026-10-01 · official
CBAM benchmarks682 records · as of 2026-10-01 · official
ECHA candidate list507 substances · as of 2026-10-01 · official
SCIP / IUCLID 6.10137,834 values versioned · as of 2026-09-30 · official
EU sanctions map6,241 records · as of 2026-10-01 · official
Eurostat trade context24 monthly observations · EU imports SITC 6 from India, 2024–2025 · as of 2026-10-01 · official statistics
Quota balancesno public bulk export · consulted per-order, never inferred
Demonstration telemetry (35,040 meter rows, UCI steel-energy sample) is labelled DEMO_ONLY and never mixed with regulatory evidence.