The case for trusting us.
One place for procurement, security and legal teams to verify how validant.ai operates: our compliance posture, contracting documents, operational security and certification roadmap. Live where it can be, available on request where it must be.
- Registered inZollikon, Switzerland
- Governing lawSwiss law
- Data processingDPA under GDPR Art. 28 and revFADP, on request
- Security reportssecurity [at] validant [dot] ai, acknowledged within 2 business days
What we hold ourselves to
Privacy notice
GDPR Art. 13/14 notice with revFADP. Plain-language summary, full detail, your rights.
Cookie policy
Full registry of every cookie we set, the legal basis for each, and live consent controls.
Responsible AI
Our public AI policy: EU AI Act risk classification, lifecycle controls, no-training guarantee.
Accessibility
Conformance statement under the European Accessibility Act and WCAG 2.2 AA, with known gaps.
How we contract
Terms of Service
The master rules for using validant.ai. Acceptable use, IP, liability caps, governing law.
Data Processing Agreement
Our standard GDPR Art. 28 / revFADP Art. 9 DPA. Includes SCCs and the Swiss addendum.
Subprocessors register
Every service provider with access to customer data, their purpose, location and transfer mechanism.
Imprint
Publisher, commercial register, authorised representation, dispute resolution.
How we run
Security disclosure
Safe-harbour policy for researchers, rules of engagement, and our security practices.
security.txt
Machine-readable contact under RFC 9116. Auto-discovery by scanners and bug-bounty platforms.
System status
Manually updated status and historical uptime for validant.ai and the platform. Incident log.
Pen-test summary
Executive summary of our latest third-party penetration test. NDA on request.
Roadmap
ISO/IEC 27001
Information security management system. Implementation underway, audit planned 2027.
SOC 2 Type II
Service organisation controls for security, availability, confidentiality. 2027 target.
ISO/IEC 42001
AI management system. Operationalising our internal AI policy as a certifiable system.
Frequently asked questions
- What is a digital trust audit?
- A digital trust audit measures whether a digital system behaves as promised across security, fairness, transparency and accountability, then documents the evidence so stakeholders and regulators can verify it.
- What is the iceberg.digital framework?
- iceberg.digital is validant.ai's framework for assessing digital trust: it maps the visible surface of a system against the larger set of hidden risks beneath it, so trust is evaluated on evidence, not appearance.