Verification is opt-in. The rated company creates the link and can revoke it at any time.
Certifications prove that governance processes exist; only testing proves how the system behaves. A certificate can never offset a behaviour finding.
We check the validity and scope of a vendor’s SOC 2, ISO 27001/42001, AIUC-1 and pentest claims, for anyone relying on them.
AvailableIndependent verifiers in Python and Node check a record offline, without trusting whoever handed it over. They agree on every digest.
AvailableEvery grade is bound to a behavioural fingerprint of the whole system: model, prompt, retrieval and tools. When the fingerprint changes significantly, the grade flips to “stale, retest due”, like a credit watch.
AvailableShows every rating of a system, with dates, not just the best one. Revocable by the rated company.
AvailableJudges run inside an attested secure enclave, with hashes of tests and transcripts committed in each .sova file, so the rated party or a regulator can recompute the grade without seeing the secret test items.
AvailableA consented timeline per system covering detected model swaps, score history, retests, incidents and ownership changes, plus a machine-readable score reference an agent can carry in its identity credentials.
Being builtFive fields and a short call. We reply within one working day.