TRUST OVERVIEW · 38-CONTROL POSTURE
A transparent view of our trust posture.
38 posture controls: 30 built and active or available; 5 roadmapped with named dependencies; 3 require independent auditor or customer systems and are never self-asserted.
A clear view of controls, evidence and limitations.
Product framework support is not company certification.
Transparent control states
38 posture controls: 30 built and active or available, 5 roadmapped with named dependencies, and 3 requiring independent auditor or customer systems. The latter are never self-asserted.
Built · Roadmapped · Independent
Tamper-evident evidence
Append-only hash-chained provenance and signed snapshots support review. Evidence is not immutable and has no external time anchor.
Provenance · Signed snapshots
Third-Party Vendor Diligence
Review supplied vendor information, responsibilities and supporting evidence within the agreed scope.
Vendor Posture · Scope Controls
FRAMEWORK SUPPORT · NOT CERTIFICATION
Not certified to Cyber Essentials, ISO 27001 or ISO 42001. Mappings are not certification or a guarantee of compliance.
FRAMEWORK
ASSURANCE DOMAIN
TRUSTEDAIGOV EVIDENCE CONTROL
ISO/IEC 42001
AI management framework support
Mapped controls and supplied review evidence
NIST AI RMF 1.0
Govern & Map Functionality
Organisational context and evidence mapping
Independent assurance
Auditor-led assessment
No company certification self-asserted
DORA (Third-Party ICT)
Critical Vendor Oversight
Vendor responsibilities and supplied evidence