Govern every AI decision through one operating record.

A connected governance operating record

Civerent is designed to connect AI systems, organizational ownership, risk decisions, policies, controls, implementation evidence, reviews, and reporting. The objective is to reduce fragmented governance work and preserve a traceable record from discovery through executive review.

Feature availability, capacity, integrations, implementation assistance, and support depend on the selected plan and any signed agreement.

AI Registry

• Maintain organization-scoped AI-system records and ownership information.
• Capture purpose, lifecycle, business context, and governance metadata.
• Open system-specific details and related risk or governance work.
• Preserve activity history for supported record changes.

Risk Engine and technical tests

• Record assessments, findings, treatment decisions, owners, and review activity.
• Operate scheduled or provider-backed technical tests where a supported integration is configured.
• Separate test execution status from legal, certification, or system-safety conclusions.
• Use findings as decision-support evidence subject to qualified human review.

Proofline: AI Change Control, passports, and drills

AI Change Control records release changes, compares before-and-after snapshots, explains affected governance records, and routes review to an authorized owner or administrator. Risk signals support the review; they do not make the final decision.

A signed release passport binds a release snapshot and recorded decision with an Ed25519 signature when the server-only signing key is configured. The separate AI Passports workflow exports an unsigned AI Registry snapshot with evidence metadata, recent audit history, and a SHA-256 digest. That digest helps detect edits only when compared with a separately trusted value.

Governance fire drills run configured scenarios against an in-memory copy and save a simulation result. A passing drill checks only its configured simulation rule; it does not verify production behavior.

Policy, compliance, and controls

• Create and govern policy records with version-aware workflows.
• Install supported framework packs and manage organization-specific implementation.
• Assign control owners, dates, status, notes, and supporting evidence.
• Preserve accountable review, approval, reminder, and evidence history where supported.

Evidence and reports

• Connect evidence to systems, risks, policies, controls, and governance activity.
• Protect supported evidence history against ordinary mutation.
• Generate operational, risk, inventory, policy, governance, and executive views.
• Export supported reports for internal review and customer-controlled diligence workflows.

Integrations and provider connections

Civerent includes an integration foundation for organization-scoped provider connections and technical-test execution. A connector should be treated as available only when its required credentials, permissions, data scope, security review, and production behavior have been configured and verified.

Enterprise readiness

• Role-based owner, administrator, member, and viewer boundaries.
• Organization-scoped inbox and live-chat records for owners and administrators.
• SAML and SCIM foundations for appropriately configured enterprise deployments.
• Trust, security, subprocessor, accessibility, billing, and procurement disclosures.
• Transparent separation between current controls, readiness work, and independent assurance.

Platform boundaries

Civerent is governance infrastructure and decision support. It does not independently establish compliance, replace legal advice, certify an AI system, guarantee safety or fairness, or assume the customer's accountability for consequential decisions.