Reason8
Trust & Security

AI Security & Compliance

Reason8 has completed a scoped, evidence-based AI readiness assessment covering AI governance, risk, and documentation practices.

Assessed by Azmoy · March 2026

AI Readiness Assessment

Reason8 has completed a scoped, evidence-based AI readiness assessment. The review covered selected AI governance, risk, and documentation practices mapped to the EU AI Act, NIST AI RMF, and ISO/IEC 42001.

Standards Alignment

Aligned

EU AI Act

European Union regulation establishing a risk-based framework for AI systems.

Aligned

NIST AI RMF

NIST AI Risk Management Framework for identifying and managing AI-related risks.

Aligned

ISO/IEC 42001

International standard for AI management systems in organizations.

Verified Controls

Governance, Ownership & Accountability

  • Legal and regulatory AI requirements documented and regularly reviewed
  • Trustworthy AI principles integrated into policies and procedures
  • AI risk roles, responsibilities, and communication lines clearly defined
  • AI risk decisions informed by diverse, cross-functional teams
  • Defined, approved AI policy maintained
  • AI roles and responsibilities assigned and documented
  • Concern reporting channels established and communicated

Intended Use, Context & Business Fit

  • AI system intended use cases clearly defined and documented
  • Deployment context and user base assessed for appropriateness
  • Business objectives aligned with responsible AI principles

Risk & Impact Management

  • AI-specific risks identified, assessed, and logged in a risk register
  • Potential harms to individuals and society evaluated
  • Mitigation measures defined for identified risks

Evaluation, Testing & Ongoing Oversight

  • AI system performance evaluated against defined metrics
  • Testing processes in place prior to and during production deployment
  • Ongoing monitoring and oversight mechanisms established

Data, Systems & Third-Party Dependencies

  • Data sources, quality, and provenance documented
  • Third-party AI components and dependencies identified and assessed
  • Data handling practices aligned with applicable privacy requirements

Available Documents

The following documents are available to qualified parties upon request.

AI Readiness Report
AI Policy
Risk Register
Production Monitoring Spec
TEEV Metrics & Summary

Questions about security?

Contact us for access to our security documentation or to discuss compliance requirements.