ISO/IEC 27001Target environment
Information-security management contexts in which licensee systems are typically operated and audited.
Standards context
The environments this technology is built for.
CIVITERA licenses intellectual property into regulated and standards-governed settings. The frameworks below describe those settings and the concerns the architecture is designed with awareness of. They are not certifications held by CIVITERA.
Read this first
The frameworks above describe the regulated and standards-governed environments CIVITERA intellectual property is engineered for, and the concerns its architectures are designed with awareness of. They do not represent certifications, accreditations, or compliance approvals held by CIVITERA, and CIVITERA does not claim conformity with any of them. Certification and compliance obligations rest with licensees deploying the technology within their own systems.
Frameworks
What each framework describes.
Named because licensee deployments are governed by them, or because the architecture was designed with the concerns they raise in view.
ISO/IEC 42001Target environment
AI management-system contexts, where governance of automated decision-making is expected to be documented and reviewable.
NIST AI Risk Management FrameworkConceptually aligned
Risk-management framing for AI systems. CIVITERA architectures are designed with awareness of the accountability and measurement concerns it describes.
EU AI ActTarget environment
A regulatory context in which high-risk systems are expected to be auditable. Relevant to how licensee deployments are governed, not a status held by CIVITERA.
IEEE standards workRelevant to
Engineering standards activity concerning autonomous and intelligent systems, relevant to the interoperability concerns the architecture addresses.
GDPRTarget environment
Data-protection contexts affecting how licensee systems process personal data, including where processing occurs.
SOC 2Target environment
Service-organisation reporting contexts common to enterprise counterparties operating licensed technology.
ETSI and ITU workRelevant to
Telecommunication and infrastructure standards activity relevant to cross-border and infrastructure-layer deployment contexts.
Responsibility
Who carries the obligation.
CIVITERA is an intellectual-property house. It does not operate systems in the markets its counterparties serve, and it is therefore not the party a certification body assesses. A licensee deploying CIVITERA technology within its own systems carries whatever certification, audit, and conformity obligations attach to that deployment in its jurisdiction and sector.
What the architecture contributes is the ability to answer the questions those regimes ask — what a system did, on what basis, and under whose authority. That is a design orientation, and it does not discharge any obligation on a licensee’s part.
- CIVITERA holds
- No certification or accreditation under the frameworks named on this page
- Licensee holds
- Certification, audit, and conformity obligations for its own deployment
- Frameworks named
- 8, as deployment context
- Status of this page
- Institutional context; not legal or regulatory advice
Naming a framework on this page does not assert conformity with it, approval under it, or assessment against it, and nothing here should be relied upon as legal or regulatory advice. Publicly available patent records may be independently verified through USPTO systems where applicable. Information concerning non-public applications is provided through controlled verification procedures to qualified counterparties.
Examination
Examine the record.
Institutional claims are published with their basis, and the governance approach explains how the architecture addresses accountability.