NAiOS Trust
naios-trustv0.1.0Public Trust Center + ISO 42001/27001 management system (AIMS): risk records, incidents, suppliers, AI inventory, approvals, and audit
Description
The trust and compliance center of your platform. Public face: a Trust Center at /p/naios-trust with your AI principles, subprocessors, data residency, and certification seals — editable by blocks and ready to link from your website. Internal face (superadmin only): the management system required by ISO/IEC 42001 and 27001 — inventory of AI systems, risk register with score, incident log, suppliers with DPA tracking, compliance calendar with reminders, document approvals by version, and audit log of AI actions. The system documents (policies, AIAs, minutes) reside in NAiOS Office: versioned, password-protectable, shareable with the auditor, and searchable by AI. Includes pre-drafted templates to get started in minutes.
Features (10)
Page /p/naios-trust with your AI principles, subprocessors, certifications, and security contact — editable by blocks, with your branding, ready to link from your website
Card per system: purpose, models, data processed, level of autonomy, and how it is monitored (evidence of control A.9 of ISO 42001)
Probability × impact with automatic score, treatment, owner, and review date — the operational heart of 27001/42001
Cycle detection → containment → resolution → lesson, with AI/security category and severity
Tracking of DPAs with review reminders; mark which are published as subprocessors in the Trust Center
Audits, management reviews, and deadlines with recurrence and notification alerts
Who approved which version and when — documents reside in NAiOS Office (versioned, protectable, shareable with the auditor)
«Initialize AIMS» creates in Office the AI policy, security policy, AIA template, review minutes, and DPA review, ready to fill in
Log of executions of AI tools (chat and agents) with configurable retention — never storing the content of the arguments
One click exports the records in CSV + the AIMS documents in a zip to deliver to the certifier