CentauroTrust & procurement
Agree the boundaries.
Then begin.
01
Before records are shared
- Scope
- Name the workflow, data owner, permitted systems and acceptance criteria.
- Data handling
- Agree confidentiality, retention, deletion and any processors or model providers in writing before access. Read-only does not mean zero risk.
- Contracting
- Centauro is the operating brand led by Miguel Kalifa. The contracting party, registration and billing details must be confirmed in the proposal before signing or sending sensitive data.
- Review scope
- The standard deliverable is a technical assessment report with agreed criteria, methods, findings and limitations. Tell us who will review it and what evidence they require.
02
Who reviews what
- Your team's system
- When Centauro evaluates a system built by your team, the report identifies the assessment scope, criteria, reviewer and any relevant relationships. Independence requirements are agreed with the intended recipient.
- Controls we implement
- The report discloses Centauro's implementation work and how retesting is reviewed. A second internal reviewer does not create organizational independence.
- An external issuer
- If your buyer requires an organizationally independent security firm, its appointment, scope and responsibilities must be confirmed before the engagement includes that deliverable. No external partnership or issuer is represented here.
03
Assessment, attestation and certification
A technical assessment documents methods, findings and limits for a defined system. A formal attestation requires an agreed subject, criteria, qualified issuer and conclusion format. We establish those requirements during scoping; this site does not offer a current formal attestation service.
ISO/IEC 42001 addresses an organization's AI management system. A scoped agent assessment can contribute evidence, but it does not replace certification when the buyer requires it. Confirm acceptance requirements with that buyer before choosing a review.
ISO/IEC 42001 · official standard description
Inspect the sample report →04