Loading…
Trust Center
The control story, in the open.
Deterministic governance becomes mandatory the moment AI moves from advice to action. We publish our control posture — including what is still in progress — so security and procurement teams can review the design before a diligence cycle, not after.
Certification & framework status
SOC 2
In progressSOC 2 formalization work is in progress. Controls are mapped publicly (change management, access, and monitoring) ahead of formal attestation.
GDPR
In progressGDPR formalization work is in progress.
ISO 27001
PlannedISO 27001 is planned. Relevant controls are already mapped in the standards matrix.
EU AI Act (Art. 12 logging)
MappedThe Decionis Score maps to EU AI Act articles including Art. 12 (record-keeping) and Art. 14 (human oversight). See the AI Act readiness page.
Regional data residency
PlannedRegional data residency is planned rather than broadly available by default today.
Running a security review? Start here.
- 1
Read the posture on this page — certification and framework status stated plainly, including what is still in progress.
- 2
Review the Governor Layer control design — who can change policy, who approves it, how it is enforced, and how a change is proven — each control with an honest status.
- 3
Walk the Governor Playbook — the operating lifecycle step by step, with the SOC 2 / ISO 27001 control each step produces evidence for.
- 4
Check the standards matrix — control-by-control mapping with evidence artifacts and auditor questions — alignment evidence, not a certification claim.
- 5
Verify a signed dossier yourself — generate a real Ed25519-signed Decision Dossier in the browser and verify it without an account.
- 6
Send us your questionnaire — vendor-assessment, DPA, or security-review questions we answer directly — before a diligence cycle, not after.
Enterprise trust signals
Microsoft ISV Partner
Listed and reviewed inside the platforms your procurement and security teams already trust.
NVIDIA Inception
AI infrastructure ecosystem signal for technical diligence and category legitimacy.
Public docs and quickstart
Public API docs, an evidence index, a quickstart and working onboarding flows — so you can judge how deep the product goes before anyone books a call.
Security and governance materials
Public trust pages describe RBAC, SSO posture, deployment model, tradeoffs, and audit evidence instead of hiding the control story behind a sales process.
Signed Decision Dossiers
Every certified action can produce signed Decision Dossier proof that can link into a Decision Chain and Decision Ledger for regulator and reviewer workflows.
Policy snapshots and override evidence
Policy Snapshot, Override Dossier, Policy Drift, and saved-risk-value artifacts make exceptions, approvals, and prevented exposure inspectable.
Kill switches
Org-wide and per-decision kill switches give teams a visible rollback and restraint surface for high-stakes autonomous execution.
Review the control design
Governance controls
Maker–checker policy approval, separation of duties, RBAC, SSO, and kill switches.
Governor Playbook
The lifecycle walkthrough for compliance officers — policy to enforcement to evidence, with SOC 2 / ISO mapping per step.
Compliance evidence pack
Governed decisions exported as control-mapped evidence for SOC 2, GDPR, and EU AI Act.
Security & governance
Public control posture, deployment model, and audit evidence.
Compliance standards matrix
SOC 2 and ISO 27001 controls mapped to concrete Decionis evidence.
EU AI Act readiness
The Decionis Score mapped to EU AI Act articles.
GRC integration
Feed signed evidence into Archer, OneTrust, or ServiceNow GRC.
Audit infrastructure
Ed25519-signed, tamper-evident Decision Dossiers.
Honest limitations: Decionis is not a full GRC suite. SOC 2 and GDPR formalization are in progress, ISO 27001 is planned, and regional data residency is planned rather than broadly available by default. We would rather state this plainly than imply certifications we do not yet hold.