TRUSTED AIGOV TRUST & ASSURANCE CENTRE

Current posture, without overstatement.

This page is a concise signpost to the current public sources. Control statements below are generated from the governed security posture.

CONTROL POSTURE30 of 38 controls are built and active or available today. 5 are roadmapped with a named dependency; 3 require an independent auditor or the customer's own systems and are never self-asserted.

ENCRYPTIONEncryption at rest: planned (SEC-4); backups are encrypted

ACCESSMFA available to enable; mandatory MFA not enforced; SSO (OIDC) available to enable, SAML/SCIM planned

TRANSPORTTLS everywhere (auto-managed certs): implemented

Independent assurance status

SOC 2 Type II: EXTERNAL_AUDIT — Independent SOC 2 attestation. Requires an audit firm over an observation window — cannot be self-asserted.
ISO/IEC 27001 & 42001: EXTERNAL_AUDIT — Certified ISMS (27001) and AI management system (42001). Requires an accredited certification body.
Independent penetration test: EXTERNAL_AUDIT — Third-party pen test + remediation. Requires an external testing firm.

Trust & Governance How the platform describes governance, assurance and evidence. Enterprise Security The public projection of this governed control inventory.