Trustible's security page states that it uses encryption in transit and at rest, multi-factor authentication, role-based access controls and penetration testing. Scope: the organization's published security statements; implementation and effectiveness were not independently audited here.
Inspect the evidence ↘GOVERNATLAS / PRODUCT DOSSIER
Trustible AI Governance Platform
Trustible describes structured AI intake, risk assessment, monitoring and governance evidence workflows.
THE DOCUMENTED SCOPE
What the current evidence describes.
Source-attributed capabilities and limits. Inspect the full record before drawing a conclusion.
Trustible names the EU AI Act, NIST AI RMF, ISO/IEC 42001 and NYC Local Law 144 among supported governance frameworks. Scope: vendor-described framework coverage; mapping does not establish certification or legal applicability.
Inspect the evidence ↘Trustible's platform page describes structured intake for AI use cases, models, agents and vendors, risk and impact assessments, approval routing, monitoring and audit evidence. Scope: vendor-described platform functions, not independent testing or a guarantee of regulatory compliance.
Inspect the evidence ↘01 / CONTEXT & SCOPE
Understand the proposition.
Define the boundary.
The decision to make
Evaluate how policy work becomes an operational decision. A team should be able to connect a governance requirement to a responsible owner, a concrete task and evidence showing what was actually done. A completed template without that chain is difficult to use when a deployment or supplier changes.
What this record does not establish
Policy content and framework references do not establish legal applicability or independent assurance. Assess the content version, the required workflow and your team's responsibility for interpreting it.
2 current sources · 3 published assertions
Source coverage is a research boundary, not a quality score.
Source coverage is a research boundary, not a quality score.
02 / YOUR EVALUATION
Turn interest into a useful trial.
A
A test worth running
Select one AI use case, assign a policy-related task and request evidence from a contributor. Reject an incomplete response, accept a revision and then change the underlying use case. Review which parts of the earlier decision remain valid and which need a new owner action.
GovernAtlas editorial proposal. We have not performed this test.
B
Evidence to bring back
- Inspect the policy or requirement version used for a decision, rather than only its current title.
- Retain the distinction between evidence supplied by a vendor and an approval made by your own organization.
03 / DOCUMENTED EVIDENCE
Read the claim. Inspect the basis.
Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.
vendor asserted
Trustible's security page states that it uses encryption in transit and at rest, multi-factor authentication, role-based access controls and penetration testing. Scope: the organization's published security statements; implementation and effectiveness were not independently audited here.
Source, dates & preserved provenance
Security - Trustible ↗Authority: vendor owned
Observed 2026-10-14 · Reviewed 2026-10-14 · current until 2026-11-13
Artifact SHA-256: 3a64ac3c8438d75a377b79dce7c27087d30424ab9d28df1e907a1ac75ad66345
The hash identifies the preserved capture. The live source may have changed.
vendor asserted
Trustible names the EU AI Act, NIST AI RMF, ISO/IEC 42001 and NYC Local Law 144 among supported governance frameworks. Scope: vendor-described framework coverage; mapping does not establish certification or legal applicability.
Source, dates & preserved provenance
Platform Overview ↗Authority: vendor owned
Observed 2026-10-14 · Reviewed 2026-10-14 · current until 2026-11-13
Artifact SHA-256: 30791f5aa1e175642e6c4947d417c195619037712bdb6278e36fbd25400b81ac
The hash identifies the preserved capture. The live source may have changed.
vendor asserted
Trustible's platform page describes structured intake for AI use cases, models, agents and vendors, risk and impact assessments, approval routing, monitoring and audit evidence. Scope: vendor-described platform functions, not independent testing or a guarantee of regulatory compliance.
Source, dates & preserved provenance
Platform Overview ↗Authority: vendor owned
Observed 2026-10-14 · Reviewed 2026-10-14 · current until 2026-11-13
Artifact SHA-256: 30791f5aa1e175642e6c4947d417c195619037712bdb6278e36fbd25400b81ac
The hash identifies the preserved capture. The live source may have changed.
Source register
Platform Overview ↗vendor owned · captured 2026-10-14
Security - Trustible ↗vendor owned · captured 2026-10-14
Brand asset provenance
Organization identity asset from its official website; inclusion does not imply endorsement.
Official website ↗ · Original asset ↗04 / BEFORE YOU COMMIT
Better questions.
A clearer decision.
Resolve these with the provider and your own evaluation team.
Which hosting and deployment model will your contract use?
Can the current SOC 2 report and trust-center access confirm scope and reporting period?
Which control mappings and monitoring connectors cover your AI estate?
Regulatory applicability requires a separate, current determination. Inclusion is not certification.
KEEP THE RECORD USEFUL
A dossier should stand up to scrutiny.
Have a source that changes this picture? Submit it for editorial review.