AI Trustmark Standard 1.0
Gold — Technical Assurance
We checked the outside, the operation and how the technology itself is built.
How securely, reliably and professionally is the defined product built?
Includes applicable Bronze and Silver controls and normally requires temporary, read-only technical access.
Secure engineering
SAST, dependency and secret scanning, SBOM, provenance, licences, IaC and CI/CD controls.
AI architecture
Models, providers, RAG sources, vector stores, prompts, tools, memory, gateways and data flows.
Adversarial testing
Safe prompt-injection, retrieval, data-exfiltration, tenant-isolation, approval and agent-tool tests.
Reliability
Repeatable product-specific evaluation of accuracy, grounding, consistency, refusal and regression.
Human oversight
Reversibility, appeal, human escalation and protection against bypass of consequential review.
What the result means
The certificate identifies the product, assessment depth, risk classification, Assurance Score, standard version, assessment date and expiry. It confirms the scope tested and that no unresolved Critical findings remained at issue; it is not a guarantee that the product is free from every vulnerability, defect or failure.
Start Gold