The systems that run the regulated business.

Churchill protects any critical Linux application that must stay in its approved state. Banking payment systems are first, and the same guarantee applies wherever a regulated business runs on software no one should change unilaterally. These are next on the roadmap.

The control is the same in every industry: only the application your quorum approved runs, unauthorized change is refused at the kernel, and every attempt becomes evidence. What changes is which system counts as critical, and which regulator asks for the proof.