Product verification
AI TrustMark independently verifies AI suppliers and products using evidence-based assurance. Bronze, Silver and Gold describe how deeply the named scope was examined; payment never buys a favourable result.
Updated
Procurement teams can reuse the resulting evidence pack. See AI vendor due diligence, procurement evidence and the ISO/IEC 42001 comparison. Customer evidence uses V0–V4 and stays unpublished until it is genuine.
Bronze, Silver and Gold describe the depth of assurance — how much was examined — not a league table of providers. Purchase buys investigation depth, not a certificate outcome.
What evidence is assessed? AI TrustMark examines named evidence about a supplier, product or service: identity, intended use, architecture, data and privacy, security, testing, human oversight, dependencies, incidents, monitoring and customer or deployment evidence where claimed. The public record states what was in scope.
Who provides the evidence? The applicant provides evidence. AI TrustMark independently checks it at the purchased depth. Customer or operational evidence is used only where it can be tied to a source, date and named product.
What is independently checked? Bronze uses external evidence. Silver adds operational evidence. Gold adds technical examination where access is granted. The methodology states the method; it does not mean every control in a framework has been certified.
What do Bronze, Silver and Gold mean? They describe how deeply AI TrustMark examines evidence for a named product. They are not a vendor league table, not purchasable favourable outcomes, and not UKAS accreditation tiers.
Does payment buy a certificate or a higher score? No. Payment buys investigation depth under published rules. It cannot improve the independently calculated 0–100 Assurance Score or guarantee a certificate outcome.
What does a TrustMark not mean? It is not government endorsement, UKAS accreditation, ISO certification, a guarantee of fitness for every use, or a ranking of suppliers. It is a dated record of what was independently checked for a named scope.
How often is evidence refreshed? Public records state when evidence was checked and when the result expires. Material model, data, security or product changes can make earlier evidence stale before that date.
Can a TrustMark be withdrawn? Yes. A TrustMark can be suspended or withdrawn if evidence is no longer current, the scope changed, or the published rules require it. The public record is updated.
How should buyers use the result? Use the named scope, investigation depth, remaining gaps and expiry date to inform procurement or assurance. It complements, and does not replace, the buyer's own award decision.
How does AI TrustMark relate to ISO/IEC 42001? ISO/IEC 42001 is an organisational AI management-system standard. AI TrustMark Assurance examines product-specific evidence at a chosen depth. They are complementary layers, not substitutes. See the ISO 42001 comparison.
Can I start with Bronze only? Yes. You can buy one depth without buying the others. Related organisations, including AI Build, are assessed on the same commercial terms and disclosed where required.
Payment never buys score, CERTIFIED, or list position. Methodology
Can the supplier prove it is who it says it is, and that it operates the controls it describes?
Where a named product is in scope, we examine how that technology is built, hosted, secured and operated.
These levels describe the depth of assurance — how much was examined and from what vantage point. They are not a ranking of bad, good and best providers. An Assurance Score and product-risk classification are recorded separately.
Bronze · External
What can be verified from outside.
Silver · Operational
Whether the organisation operates as claimed.
Gold · Technical
What happens when the technology is examined.
Bronze
What can independently be verified from outside?
Silver
Does the organisation operate as it claims?
Gold
What happens when the technology itself is examined?
Assessment depth
Bronze, Silver or Gold records the investigation depth for the named scope.
Assurance Score
Scores applicable controls. A high score cannot compensate for a catastrophic hard-gate failure.
Product risk
Determines applicable controls, evidence strength, testing intensity and certification gates.
How judgements are made, including scoring and expiry, is documented in the methodology. How Bronze/Silver/Gold relate to ISO/IEC 42001, UKAS and sector schemes such as AIGAS is explained in the UK scheme comparison. How one evidence set can be mapped to buyer requirements is explained for procurement partners.
Contact us
Send a message, or book a 30-minute video meeting in Tim Savigar’s diary.
