A policy PDF proves intent. An annual certificate proves a control existed at audit time. A TruCert proves the control operated — last month, on live traffic — and it lapses the moment the evidence stops arriving. Powered by the open OpenAISF framework, authored by our founder.
Every request passes the gateway in your estate — metered, governed, logged under your retention rules.
Budgets enforce, failover exercises, guardrails mask, keys rotate. Each event is a fact, not an attestation.
Facts are mapped to named provisions — AI Act, DORA, NIS2, GDPR — and packaged as auditor-ready exports.
Each TruCert carries a validity window. Operating controls renew it. Silence lets it lapse. Nobody has to revoke anything.
Shaped-for, not "certified-under" — the distinction matters and we keep it.
Art. 50 disclosure inventory (applicable since 2 Aug 2026) and log shape aligned to the Art. 26(6) deployer duties arriving 2 Dec 2027 — postponed by Reg. (EU) 2026/1744, a date most vendors still get wrong. Evidence trails take a year to mature; start before the duty bites.
Register-of-information extracts for your AI providers (Art. 28), concentration snapshots (Art. 29), and routing/failover records that document a tested exit strategy (Art. 30).
Art. 21(2) access-control artifacts; provider and sub-processor chain maps generated from actual traffic, not from a questionnaire; EU-endpoint routing reports.
Per-request signed records of destination provider and region. A record, not a promise — and a capability no other gateway offered at our mid-2026 market verification.
OpenAISF's doctrine: "a policy that never fired under live traffic was not operating." Static certificates age silently; expiring evidence cannot lie about the present. Your auditor gets a document that is either current — or visibly lapsed.
Included with Assure: 3 audit-support days per year. We sit with your auditor and walk through every export.
TruCert provides controls tooling and evidence; regulatory compliance judgments remain with your organisation and its auditors. No certification is claimed or implied.
On top of Gateway — €3,000/month all-in per production cluster. Published, like everything else.
Full price card