Loading…
Trust Center
The control story, in the open.
Deterministic governance becomes mandatory the moment AI moves from advice to action. We publish our control posture — including what is still in progress — so security and procurement teams can review the design before a diligence cycle, not after.
Certification & framework status
SOC 2
In progressSOC 2 formalization work is in progress. Controls are mapped publicly (change management, access, and monitoring) ahead of formal attestation.
GDPR
In progressGDPR formalization work is in progress.
ISO 27001
PlannedISO 27001 is planned. Relevant controls are already mapped in the standards matrix.
EU AI Act (Art. 12 logging)
MappedThe Decionis Score maps to EU AI Act articles including Art. 12 (record-keeping) and Art. 14 (human oversight). See the AI Act readiness page.
Regional data residency
PlannedRegional data residency is planned rather than broadly available by default today.
Enterprise trust signals
Microsoft ISV Partner
Enterprise ecosystem alignment for buyer trust, procurement, and integration posture.
NVIDIA Inception
AI infrastructure ecosystem signal for technical diligence and category legitimacy.
Public docs and quickstart
Public API docs, evidence index, quickstart, onboarding flows, and workspace surfaces let buyers inspect product depth before a services cycle.
Security and governance materials
Public trust pages describe RBAC, SSO posture, deployment model, tradeoffs, and audit evidence instead of hiding the control story behind a sales process.
Signed Decision Dossiers
Every certified action can produce signed Decision Dossier proof that can link into a Decision Chain and Decision Ledger for regulator and reviewer workflows.
Policy snapshots and override evidence
Policy Snapshot, Override Dossier, Policy Drift, and saved-risk-value artifacts make exceptions, approvals, and prevented exposure inspectable.
Kill switches
Org-wide and per-decision kill switches give teams a visible rollback and restraint surface for high-stakes autonomous execution.
Review the control design
Governance controls
Maker–checker policy approval, separation of duties, RBAC, SSO, and kill switches.
Security & governance
Public control posture, deployment model, and audit evidence.
Compliance standards matrix
SOC 2 and ISO 27001 controls mapped to concrete Decionis evidence.
EU AI Act readiness
The Decionis Score mapped to EU AI Act articles.
GRC integration
Feed signed evidence into Archer, OneTrust, or ServiceNow GRC.
Audit infrastructure
Ed25519-signed, tamper-evident Decision Dossiers.
Honest limitations: Decionis is not a full GRC suite. SOC 2 and GDPR formalization are in progress, ISO 27001 is planned, and regional data residency is planned rather than broadly available by default. We would rather state this plainly than imply certifications we do not yet hold.