Procurement diligence · honest scope

Trust center for AI Governance & Evidence

Metadata-only Microsoft 365 processing. Export bundles fail closed on tamper. No custody, payment rails, or certifier claims — Available · Planned · Out of scope only.

Metadata-only M365Fail-closed export

Procurement pack Verify export integrity

Procurement diligence

What legal and security reviewers need to see

Honest Available · Orientation · Planned · Out of scope — what legal, security, and procurement reviewers inspect before pilot sign-off.

Metadata-only M365

Purview · Entra · audit indices — evidence index on every TLE, no mailbox custody.

Available

Fail-closed export

Board PDF and procurement ZIP fail verification when tampered — by design.

Available

EU + US regulatory orientation

EU AI Act Art. 12 · NIST AI RMF · ISO 42001 mapping — orientation only, not certifier claims.

Orientation

Ed25519 transparency log

Cryptographic receipt chain — planned product capability.

Planned

SOC 2 Type II

Independent audit planned — not yet completed.

Planned

No custody rails

No payment execution, MSB, asset custody, or money-transmission claims.

Out of scope

Data handling

Metadata-only M365 connectors

Purview · Entra ID · audit log indices — no mailbox content custody. See Privacy and Canada trust notes.

Data handling summary
Surface	Posture
M365 mailbox / content custody	Out of scope
Purview · Entra · audit metadata index	Available
Subprocessor list & retention	Orientation

Export integrity

Fail closed on tamper

Board PDF and procurement ZIP include integrity checks. Walkthrough: offline verify guide.

Export bundle

Board PDF + procurement ZIP + manifest from workspace or pilot tenant.

Verify PASS

Unmodified bundle returns export_integrity: PASS.

Tamper FAIL

Any alteration fails verification — by design for procurement reviewers.

Honest certification posture

Available · Planned · Out of scope

We produce governance artifacts — not company ISO/SOC certification claims.

Certification and capability posture
Control / capability	Posture
TLE v1 + workspace UI	Shipped
Export integrity fail-closed	Shipped
M365 metadata-only processing	Shipped
Board PDF + procurement ZIP	Shipped
Framework citations (NIST · ISO orientation)	Orientation
SOC 2 Type II	Planned
ISO 27001 / 42001 certification (Noetfield as certifier)	Out of scope
Ed25519 / Merkle transparency log	Planned

▶

5-minute demo

Live evaluate → TLE path

TLE

YAML samples

Go · conditional · rejected

ZIP

Procurement pack

Buyer diligence bundle

●

Status

Public surface availability

Board PDF in your next governance meeting

Non-confidential intake · include your Request ID · Copilot Governance Pack ($2k–10k · 90 days · board PDF), Trust Brief ($10k), federal or MSP lane · operations@noetfield.com

Apply for pilot ($2k–10k) Request Trust Brief ($10k)