AI in use but no compliance framework disclosed
Compliance frameworks such as NIST AI RMF and ISO 42001 are recognised standards for managing AI responsibly. Disclosing which framework your business follows - typically on a trust, AI policy, or security page - signals to customers and business partners that your AI use is governed and auditable.
Why this matters
Some enterprise buyers and procurement teams ask for a disclosed AI governance framework before approving AI vendors. The EU AI Act phases in obligations over several dates, including transparency duties for some AI systems and requirements for high-risk systems, and which apply to you depends on your product and market. Without a disclosed framework, some deals may take longer in legal or security review. Check with a legal adviser which obligations apply.
How to fix it
Create a short /trust or /ai-policy page that names the framework you follow (or are working toward), describes what AI does in your product, and provides a contact for AI-related queries. Even a basic disclosure is better than silence.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit