Experiential publishes meaningful security controls. The current security page documents ZDR-only routing, no-training-provider routing, provider allowlists and per-request attribution. It also states that the company is SOC 1 audited, with the report available on request.5
The open-source repository improves inspectability. It documents anonymous aggregate PostHog telemetry enabled by default but says telemetry excludes prompts, traces, actions, observations, paths, model names, credentials and raw customer content; telemetry can be disabled locally.2
Y Combinator independently confirms the company, founders, Summer 2026 batch and its gateway/custom-model positioning.6 That is useful identity and company-context evidence, not product-quality validation.
The fixed 50-source panel found no current exact-product professional review, user-rating signal or independent benchmark eligible for numeric transfer. Four panel domains were inaccessible through the lawful crawler path and were not bypassed. Missing evidence is treated as absent, not negative.