Grain: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-11-04 08:57 UTCtrust.grain.com

Summary

Grain’s Trust page now lists restricted encryption-key access, portable-media encryption, penetration testing, disaster-recovery planning and testing, and data-retention and deletion controls. It no longer displays several controls, including employee background checks and production-database access restrictions; these are disclosure changes, not evidence that the underlying practices ended.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Grain removed; blue is what they added. Muted text is unchanged context.

Added#1

…Test Controls Updated ‹ago› View all Infrastructure security nothing here Unique account authentication enforced Production application access restricted…

…Test Controls Updated ‹ago› View all Infrastructure security Encryption key access restricted Unique account authentication enforced Production application access restricted…

Removed#2

…Unique account authentication enforced Production application access restricted ~~Production database~~ access restricted View ‹count› more Infrastructure security controls…

…Unique account authentication enforced Production application access restricted removed access restricted View ‹count› more Infrastructure security controls…

Changed#3

…View ‹count› more Infrastructure security controls Organizational security ~~Production inventory maintained Employee background checks performed Code of Conduct acknowledged by contractors~~ View ‹count› more Organizational security controls Product security…

…View ‹count› more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View ‹count› more Organizational security controls Product security…

Changed#4

…Product security Data encryption utilized Control self-assessments conducted ~~Internal security procedures Cybersecurity insurance maintained SOC 2 - System Description Board oversight briefings conducted~~ View ‹count› more Internal security procedures controls Data…

…Product security Data encryption utilized Control self-assessments conducted Penetration testing performed Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View ‹count› more Internal security procedures controls Data…

Added#5

…maintained View ‹count› more Internal security procedures controls nothing here Subprocessors View all Amazon Web Services • Cloud…

…maintained View ‹count› more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Cloud…

Compared with the previous archived version (#13856 to #14672). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Nov 3
Before captured 09:02 UTC
In the 2026-11-03 checkpoint, timestamped by FreeTSA and DigiCert on Nov 4, 00:42 UTC. Record hash 5efa3679b4c2f812…
Download proof
Nov 4
After captured 08:57 UTC
In the 2026-11-04 checkpoint, timestamped by FreeTSA and DigiCert on Nov 5, 00:43 UTC. Record hash 6bb7a34b2b6afcc2…
Download proof

History of this page

TodayThursday, November 5Thu, Nov 5

1 page change

Content changed
09:02Page change
Trust pagechanged
Grain’s Trust page added “Unique production database authentication enforced” and removed “Production application access restricted” from its listed Infrastructure security controls. It also added a link to more Product security controls; the diff does not establish changes to the underlying protections.

YesterdayWednesday, November 4Wed, Nov 4

1 page change

Content changed
08:57Page change
Trust pagechangedthis change
Grain’s Trust page now lists restricted encryption-key access, portable-media encryption, penetration testing, disaster-recovery planning and testing, and data-retention and deletion controls. It no longer displays several controls, including employee background checks and production-database access restrictions; these are disclosure changes, not evidence that the underlying practices ended.

Tuesday, November 3

1 page change

Content changed
09:02Page change
Trust pagechanged
Grain’s Trust page added “Production inventory maintained” under organizational security and removed “Code of Conduct acknowledged by employees and enforced.” These edits change the security assurances displayed to customers but do not establish whether the underlying practices changed.

Cite this

Trust page changed on Grain’s Trust page, changed 2026-11-04 08:57 UTC (change 2 of 3).

Title: Trust page changed
Vendor: Grain
Date: 2026-11-04 08:57 UTC
URL: https://rewindex.com/change/p14672

All Grain changes Grain profile Markdown JSON