GOVERNATLAS / PRODUCT DOSSIER

Cranium

Cranium describes enterprise AI security and governance, including visibility into AI assets and their risks.

01 / CONTEXT & SCOPE

Understand the proposition.
Define the boundary.

The decision to make

Treat inventory, observation, policy and evidence sharing as distinct steps in a governance process. A living system of record can support oversight without proving that an action is blocked. Choose the particular model, agent or supplier relationship for which a reviewer needs an evidence chain.

What this record does not establish

An AI inventory or posture view is not independent proof of runtime enforcement, model validity or regulatory compliance. Confirm data sources, boundaries and review ownership.

1 current source · 1 published assertion
Source coverage is a research boundary, not a quality score.

02 / YOUR EVALUATION

Turn interest into a useful trial.

Open the evaluation playbook ↗
A

A test worth running

Register a synthetic agent and connect an observed action to a policy decision. Change its tool permission, inspect the resulting posture and runtime records, and export the original evidence relationship. Verify whether an outside reviewer can distinguish the current state from the earlier configuration.

GovernAtlas editorial proposal. We have not performed this test.

B

Evidence to bring back

  1. An asset/policy/observation ownership map.
  2. An exported change and action history with current versus historical state explicit.

03 / DOCUMENTED EVIDENCE

Read the claim. Inspect the basis.

Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.

01
vendor asserted

Cranium describes enterprise AI security and governance, including visibility into AI assets and their risks. Scope: primary documentation only; no independent product test or compliance determination.

Source, dates & preserved provenanceCranium — current primary product documentation ↗

Authority: vendor owned
Observed 2026-10-16 · Reviewed 2026-10-16 · current until 2026-11-15

Artifact SHA-256: 5964aad1479db5a98d707a8c1b41fc7e815d368de822dae736657a481976b037

The hash identifies the preserved capture. The live source may have changed.

Source register

Brand asset provenance

Organization identity asset from its official website; inclusion does not imply endorsement.

Official website ↗ · Original asset ↗

04 / BEFORE YOU COMMIT

Better questions.
A clearer decision.

Resolve these with the provider and your own evaluation team.

01

Can you provide an asset/policy/observation ownership map for the selected configuration?

02

Can you provide an exported change and action history with current versus historical state explicit for the selected configuration?

03

Which exact version, entitlements, data paths and responsible roles apply?

Regulatory applicability requires a separate, current determination. Inclusion is not certification.

KEEP THE RECORD USEFUL

A dossier should stand up to scrutiny.

Have a source that changes this picture? Submit it for editorial review.

Raise an evidence issue ↗