A publishable page that answers the AI questions for you.
Put your company name in. This is the page you can publish on your site and point a security reviewer to. It states what you can evidence today — honestly, gaps included.
Your company — AI Trust Center
This page summarizes how we govern the AI in our product and what we can evidence. It is provided for customers and partners conducting security reviews.
How we use AI
Your company does not currently use AI to make or materially assist decisions. This page will be updated if that changes.
In progress
- BuildingNIST AI RMF MANAGE 4.1 — Post-deployment monitoring and documentation of AI system activity
- BuildingNIST AI RMF MEASURE 2.7 — AI system logging and traceability of behavior over time
- BuildingISO/IEC 42001 A.6.2.8 — Recording and logging of AI system operation for accountability
- BuildingSOC 2 CC7.2 — Monitoring of system components and anomalies with a reliable record
- BuildingColorado SB 26-189 Record retention — Retaining records needed to demonstrate compliance for ~3 years
- BuildingNIST AI RMF GOVERN 3.2 — Defined human roles and oversight for AI decisions
- BuildingISO/IEC 42001 A.9.2 — Human oversight of AI systems and their outputs
- BuildingNIST AI RMF MAP 2.3 — Documentation of AI system context, versions, and changes
- BuildingISO/IEC 42001 A.6.2.4 — Change management and traceability across the AI lifecycle
- BuildingSOC 2 CC3.2 / CC8.1 — Change management and the ability to produce evidence of it
This page describes our practices and is not a legal representation of compliance with any specific law or standard. Please direct formal assurance requests to our team.
Paste the HTML straight into your site or CMS — every style is inline, so nothing depends on our stylesheet. The Markdown version is for Notion, Confluence, or a docs repo.
Have counsel review before you publish — this describes your practices, it is not a representation of compliance.