AI Trustmark Standard 1.0
Silver — Operational Assurance
We checked whether the organisation actually operates as it claims.
Do the provider's real operations match its policies and promises?
Includes all applicable Bronze controls plus operational evidence and authorised synthetic-customer tests.
Policy to practice
Controlled privacy-rights, deletion, correction, portability and opt-out tests using synthetic data.
Customer care
Low-volume support tests measuring acknowledgement, meaningful response, escalation and resolution.
Resilience
Backups, restore exercises, recovery objectives, continuity and incident response.
Access and change
MFA, privileged access, joiner/mover/leaver controls, releases, approvals, testing and rollback.
AI governance
Responsible ownership, risk register, escalation, model changes and evaluation processes.
What the result means
The certificate identifies the product, assessment depth, risk classification, Assurance Score, standard version, assessment date and expiry. It confirms the scope tested and that no unresolved Critical findings remained at issue; it is not a guarantee that the product is free from every vulnerability, defect or failure.
Start Silver