Trust
Governance architecture
Where each Teradius control sits in the frameworks boards ask about.
A map showing where built and planned controls sit in three frameworks. A map, not a conformity claim. Teradius holds no certification and claims none.
How to read this page
- True now means built and working in our pre-release environment on synthetic data. Nothing is generally available.
- In development means being built now. Our demonstration preview shows what is in development.
- In design means designed, not yet built.
- A true-now row is a product feature that supports the referenced control. It does not mean any organisation has implemented that control.
- Framework references are identifiers only. The standards' text is not reproduced. Check each reference against the published text.
- The EU AI Act column names the subject an article covers. It does not say Teradius, or your use of it, is in scope.
- Nothing here is an audit, an attestation or legal advice.
The map: controls by framework
| Teradius control | Status | NIST AI RMF | EU AI Act | AU Voluntary AI Safety Standard |
|---|---|---|---|---|
| A named person approves the exact effect: amount, recipient, record version, with a stronger sign-in step | True now | Govern, Manage | Art. 14 Human oversight | Guardrail 5 Human control |
| Authority re-checked at execution; a revoked approver or stopped agent is refused | True now | Manage | Art. 14 | Guardrail 5 |
| Agents contained: restricted identity, catalogue actions only, budgets, a stop at any step | True now | Govern, Manage | Art. 9 Risk management; Art. 14 | Guardrails 2, 5 |
| Every agent proposal shows its AI origin and its reason | True now | Map | Art. 13 Transparency; Art. 50 | Guardrail 6 Inform people |
| Signed, chained decision records and receipts, checkable without relying on Teradius | True now | Measure, Manage | Art. 12 Record-keeping | Guardrail 9 Records |
| A person-only path for every agent-assisted job, so the business runs without a model | True now | Manage | Art. 14 | Guardrail 5 |
| Each customer's records kept separate; export and end-of-tenancy deletion tested | True now | Measure | Art. 15 | Guardrail 3 Data, privacy, security |
| The approval screen a person uses, with the AI origin, reason and exact effect shown | In development | Map, Manage | Art. 13; Art. 14 | Guardrails 5, 6 |
| Evidence of the AI run itself: the model, its version and the context it saw | In design | Measure | Art. 12 | Guardrail 9 |
| An AI policy, named roles, an AI inventory and impact assessments (the management layer) | In design | Govern, Map | Art. 9; Art. 27 Fundamental rights impact assessment | Guardrails 1, 2, 10 |
| A way for an affected person to query or contest an AI-assisted action | In design | Manage | Art. 86 Right to explanation of individual decision-making | Guardrail 7 Contest |
| Third-party agents calling Teradius-governed actions under the same approvals | In design | Govern | Art. 14 | Guardrail 8 Supply chain |
- The management layer is planned, not built. The true-now rows are technical controls in the product.
- Sources: NIST AI RMF 1.0; Regulation (EU) 2024/1689; Voluntary AI Safety Standard (Australia, 2024) (evolved by the Guidance for AI Adoption, October 2025).
Where Teradius can run
One product, designed for four ways of running. None is in production today.
| Model | What it means | Status |
|---|---|---|
| Cloud service | Run by us. | In design |
| Dedicated | Run by us for one organisation. | In design |
| Customer-hosted | In your own cloud account or data centre. | In design |
| Hybrid | Approval and evidence with you; the rest where you choose. | In design |
| Demonstration preview | Synthetic data only, by invitation, for briefings. | In development |
- No production deployment exists. We will publish data-location statements when a service exists.
- Independent assessment of our security and AI-management controls is planned. No assessment has started.
- Teradius holds no security certification and claims none, and has not sought regulatory approval.
- We will state a certification only when it is granted.
What this page does not say
- No certification, attestation or regulatory approval is held or implied. None has been applied for.
- "True now" is not "generally available". Everything true now runs pre-release on synthetic data.
- A framework reference is a map, not a statement of conformity.
- No customer, outcome figure, price or roadmap date appears here.
- General information, not legal advice; check your own obligations with your adviser.
Bring one governed action
Request a briefing about the people, rules and evidence your organisation would need.