Pass the AI section of your security review.
Your buyer's questionnaire now asks what your AI did, what data it saw, and how you can prove it. The Scrutari Evidence Pack makes your product provable in days, so the review stops stalling the deal.
What reviews ask in 2026
The 2026 SIG maps to ISO 42001 and adds AI-lifecycle and shadow-AI questions. CSA's AI Controls Matrix and HECVAT 4 bring their own AI sections.
Buyers increasingly want a sustained trail of documented evidence that your AI governance is actually enforced, not a policy PDF.
Contracts now demand output logs sufficient to reconstruct individual predictions, advance notice of model changes, and proof that customer data never trains models.
The evidence pack
A fixed-fee engagement that ends with the artifacts your reviewer names
- Scrutari in front of your AI providers (OpenAI, Anthropic, Gemini, Bedrock) with two DNS records. No code rewrite.
- A signed, tamper-evident record of every AI call. Who called, what crossed, what it cost. Your buyer's auditor verifies the export offline with our open verification tool, without trusting us, or you.
- Sensitive data redacted before anything leaves. PHI for healthcare buyers, financial and personal data elsewhere, with the redactions themselves on the record.
- Per-agent identity and spend. One key per agent or feature, so the question of which AI did what always has an answer.
- The pack itself. Questionnaire-ready answers mapped to the AI sections of SIG, AI-CAIQ, and HECVAT, a signed evidence export with verifier, a data-flow diagram, a model-change-notice process, and a no-training attestation backed by records instead of promises.
Logs are testimony. Evidence can be checked.
Application logs can be edited after the fact, which is why reviewers discount them. Scrutari records are cryptographically signed and chained at the moment of the call, and the whole path rides quantum-safe transport, which answers the long-lived-data question before a healthcare reviewer asks it.
How it runs
Gateway live. Two DNS records, your providers behind the boundary, evidence starts accruing.
Pack assembled. Mapped answers, signed export, diagrams, attestations.
You answer the review. An annual subscription keeps evidence accruing for every review after this one.
Thirty minutes to scope it.
Bring the questionnaire that is stalling you. We will tell you exactly which questions the pack answers and how fast. We respond within one business day.