COMPANY

Certainty, as a company.

TruCert exists so that European organisations can run AI at full speed on their own terms: every model behind one gateway they own, every euro measured and capped, every request governed — and, when it matters, proven.

What we don't do

You're buying certainty. It starts with us being exact about the edges — on the website, not in a data room.

NOT YETRun your gateway 24/7

Your team operates; we harden, document and escalate in business hours. Managed operations ("Operate") is the roadmap — deliberately, and publicly.

NOT YETHold certifications

No SOC 2, no ISO. ISO 27001 planned when scale justifies an audit worth the paper.

NEVERGuarantee compliance

Nobody honestly can. We generate operating evidence; judgments belong to you and your auditors.

NEVERHide our foundations

TruCert builds on proven open-source components and ships their licenses and notices in every distribution — as the license requires, and as honesty prefers.

Where we come from

TruCert is founded by Maarten Loose, author of OpenAISF — an open AI safety & security framework (spec CC BY 4.0, tooling Apache 2.0) covering ISO 42001, NIST AI RMF and EU AI Act requirements, plus 36 original controls. Its core idea powers Assure: conformance should be proven by live traffic, and evidence should expire when the proof stops arriving.

TruCert B.V. is being established in the Netherlands. EU-owned, EU jurisdiction, EU contracts.

Transparency, standing

Security[email protected] · coordinated disclosure policy · security statement available for vendor assessments.
LicensingOpen-source notices shipped in every release; licensing transparency page lists all components and licenses.
PrivacyYour prompts, logs and spend data never transit TruCert systems. Telemetry off by default. Privacy policy applies to our website and support only — because that's all we touch.
ClaimsEvery statement on this site must survive the question: "which document proves this?" If one doesn't, tell us — we'll fix the site.

Talk to the founder.

No SDRs, no discovery-call scripts. [email protected] reaches the person who built this.

[email protected]