SoAITrust
Due diligence for AI systems

Assess AI vendor risk. With confidence.

Certifications checked at the source, security and governance measured, risks quantified and a client-ready report.

Book a demoSee the services
NovaMente Tecnologia · Customer service assistant
ISO/IEC 27001✓ IAF CertSearch
Environment security58 / 100
AI governance71 / 100
Risk criticality44 · 2 high
VerdictApproved with conditions
Alignment
NIST AI RMF 1.0Govern · Map · Measure · Manage
SOC 2AICPA Trust Services Criteria
BacenRes. CMN 4.893 · Res. BCB 85
OWASP Top 10 for LLMPrompt injection, disclosure, excessive agency
The numbers

One yardstick, grounded in international standards

47+controls across 12 domains
14quantified AI risks
13frameworks, standards and laws
How it works

One assessment, many customers.

1
VerifyCertifications checked on IAF CertSearch
2
AnswerQuestionnaires with evidence
3
ScoreScores, maturity and criticality
4
PresentVerdict, scorecard and report
What you receive

Reports ready to present

Scorecard

NovaMente · Customer service assistant

58Environment security
71AI governance
44Risk criticality
ISO/IEC 27001✓ IAF CertSearch
VerdictApproved with conditions
Scorecard1 page · to share with customers
Due diligence report

AI customer service assistant

NovaMente Tecnologia · 2026
Score per domain
Governance63
Access83
Data58
App and model38
Infra75
Risk matrix
4 critical
1 high
9 moderate
Due diligence report15 to 20 pages · scores, risks and findings
Action plan

Prioritized findings

P1Mandatory MFA on privileged access30 days
P1Prompt injection defenses30 days
P2Model card and change control90 days
P3Bias testing per group180 days
Action planP1 to P3 priorities with deadlines
ScorecardDue diligence reportHighlightsBenchmarkRating details
Services

From questionnaire to verdict.

01

Certifications

ISO 27001, 42001, 27701 and more, at the source.

 02

Environment security

26 controls in 6 domains.

 03

AI governance

21 controls in 6 domains.

 04

Risk and due diligence

14 risks, 5×5 matrix and verdict.
Who assesses

Analysts, not forms.

Evidence validation with the vendor's team
Evidence validation with the vendor's team
Presenting the verdict to the customer
Presenting the verdict to the customer
Who it is for

Buy with confidence or prove your maturity.

Buyers

Mitigate AI vendor risk

  • The same yardstick for every vendor
  • A verdict ready for risk, legal and privacy
  • Contracts conditional on the action plan
Book a demo
Vendors

Get assessed once

  • One scorecard for all customers
  • Gaps before the customer finds them
  • Progress tracked at every reassessment
Request an assessment
Customers

Who trusts SoAITrust

Customer logo
Customer logo
Customer logo
Customer logo
Customer logo
Customer logo

See customers and cases

Methodology

Based on international frameworks

ISO/IEC 27001:2022ISO/IEC 42001:2023ISO/IEC 23894NIST AI RMF 1.0NIST CSF 2.0SOC 2BacenOWASP Top 10 for LLMMITRE ATLASEU AI ActLGPDGDPRPL 2338/2023
NIST AI RMF 1.0ISO/IEC 27001 + 42001IAF CertSearch
Book a demo

See SoAITrust assess a real vendor

30 minutes, with a sample AI system.

Book a demo