Skip to content

If you are in crisis, call or text 988, then press 1 — or chat at VeteransCrisisLine.net. This platform is not a crisis line.

Vet Battle Buddy

Trust Center

Evidence Before Conclusions. Trust Before Intelligence.

The public site is educational. Production veteran and customer systems are designed for regulated environments. We do not describe a roadmap as an authorization.

Pillars

How trust is built into the product

Governance

Human decision authority is preserved. Assisted outputs are advisory. Official determinations remain with the VA, accredited representatives, and clinicians.

Security

Zero-trust architecture, encryption in transit and at rest, immutable audit logging, and CISSP-led engineering under Tanner Tobey.

Compliance posture

SAM.gov registered. FedRAMP Moderate alignment in progress. HIPAA-ready controls as architecture — not covered-entity certification. Not a completed ATO.

Auditability

Assisted outputs must be traceable to source evidence. Black-box scoring is not the public product.

PHI and records

The public Claim Readiness Assessment does not require document upload. Do not submit medical files, DD-214s, or SSNs on this website.

Evidence governance

VBB organizes and names gaps. It does not invent a nexus, a rating, or a missing record.

Posture and roadmap — not an ATO

  1. Live

    Public educational layer

    Claim Readiness Assessment, Heat Map, and Mission Brief. Value first. Optional report after the aha moment.

  2. In progress

    FedRAMP Moderate alignment

    Alignment and preparation. This is not an authorization to operate and is not described as one.

  3. Architecture

    Azure Government and HIPAA-ready controls

    Designed for high-stakes environments. Readiness language is not covered-entity certification.

  4. Pilot constraint

    Human override and audit trail

    Every bounded evaluation keeps authorized humans in command and keeps outputs reconstructable.

Security statements, stated precisely

  • Zero-trust architecture
  • HIPAA-ready controls and encryption — readiness, not a claim of current HIPAA covered-entity certification
  • FedRAMP Moderate alignment in progress — not an authorization to operate
  • Designed for Azure Government — not a statement that production is already authorized there
  • Immutable audit logging
  • Tribal sovereignty protections
  • Full explainability with human oversight

Precision builds credibility with federal buyers. We do not describe alignment as certification.