Certification

Certification is optional and only issued after evidence is produced and reviewed. It provides third-party verification that your Evidence Pack meets our standards.

Certification scope

ProvenAI certification verifies that your Evidence Pack meets our published standards. It confirms:

  • Your Evidence Pack is complete and includes all required sections
  • Risk classifications are documented with rationale
  • Ownership and accountability structures are clear
  • Evidence Pack is exportable and shareable

Certification does not verify the accuracy of your AI inventory, the appropriateness of your risk classifications, or your compliance with regulations.

Verified vs attested

What we verify

  • • Completeness of Evidence Pack sections
  • • Presence of required documentation
  • • Consistency of risk classifications with rationale
  • • Exportability and structure of Evidence Pack

What is self-attested

  • • Accuracy of AI inventory information
  • • Appropriateness of risk classifications
  • • Effectiveness of monitoring and controls
  • • Compliance with regulations

Renewal and re-review

Annual renewal

Certification is valid for one year from the date of issue. Annual renewal requires:

  • • Updated Evidence Pack reflecting current AI systems
  • • Review of any changes to risk classifications
  • • Confirmation that ownership structures remain current

Re-review triggers

Certification may require re-review if:

  • • Significant changes to AI inventory (new high-risk systems)
  • • Changes to risk classifications
  • • Changes to ownership structures
  • • Updates to Evidence Pack structure or standards

What the badge means

What it means

  • • Your Evidence Pack meets ProvenAI standards
  • • You have documented AI governance practices
  • • Your Evidence Pack is complete and exportable
  • • You can display the badge on your website and materials
  • • You are listed in the ProvenAI Directory

What it does not mean

  • • Your AI systems are technically verified
  • • You are compliant with EU AI Act or other regulations
  • • Your risk classifications are correct
  • • Your AI inventory is accurate
  • • We provide legal advice or compliance guarantees

Certification as an outcome

1

Evidence Pack

Produce your Evidence Pack using the Evidence Engine. Document all AI systems, ownership, risk classifications, and monitoring processes.

2

Review

We review your Evidence Pack against our published standards. We verify completeness, structure, and documentation quality.

3

Certification

If your Evidence Pack meets our standards, certification is issued. You receive a badge and are listed in the Directory.

Standards and criteria

Our certification standards are published and transparent. Review the criteria we use to evaluate Evidence Packs.

Ready to get certified?

Start by producing your Evidence Pack. Certification is optional and comes after evidence review.