Skip to content

Change management

must

No production deploy without independent review, passing required tests, and a recorded deploy.

This is a procedure change under SOC 2 CC8.1 (changes to software and procedures) and ISO 27001 A.8.25 / A.8.32.

Required

  1. Change is proposed on a branch (MR).
  2. Independent review — author cannot self-merge a must procedure or production code.
  3. Required pipeline gates are green.
  4. Deploy is logged (who, what SHA, when).

Emergency path

An exception is allowed only with owner, rationale, compensating control, and expiry. Retroactive review within 24 hours. Agents cannot create or approve exceptions.