GDPR principles
Lawfulness, purpose limitation, data minimisation, storage limitation, integrity/confidentiality and accountability guide personal-data handling.
TRUST CENTER
Security claims should be verifiable.
This page separates...
EU AI Act transparency
Interactive AI experiences should disclose AI interaction where applicable and keep human oversight/risk classification in the delivery model.
OWASP ASVS 5.0
Web application security requirements are used as a verification baseline. This is not an OWASP endorsement or certification.
OWASP AISVS 1.0
AI-enabled systems are reviewed against testable AI security requirements across the lifecycle.
WCAG 2.2 AA
Keyboard navigation, focus, labels, target size, contrast and reduced-motion behavior are part of release QA.
NIST AI RMF 1.0
Used as a risk-management reference for mapping, measuring and managing AI risks. NIST is revising AI RMF 1.0; NOEPRAX will track the revision rather than claiming a static certification.
ISO/IEC 27001
Information Security Management System certification is a roadmap item, not a current certification claim.
ISO/IEC 42001
AI Management System certification is a roadmap item for mature AI governance processes.
SOC 2
A future attestation objective for controls around security and service trust. No SOC 2 badge is claimed today.
Free paid-token gate
Public diagnostic logic is deterministic. Paid model inference is intended only for paid entitlements with configured budgets.
DATA PRINCIPLES
Collect less. Store less. Grant less.
The default architecture favors minimal context retrieval, tenant isolation, least-privilege tool access, explicit approval for sensitive actions, auditability and deletion/retention controls.
REFERENCE STATUS
Standards are references until an external body says otherwise.
Important: alignment with a standard is not the same thing as certification or third-party attestation. NOEPRAX will keep these statuses explicit.
ASVS 5.0.0OWASP web security verification baseline
AISVS 1.0OWASP AI security verification baseline
WCAG 2.2 AAaccessibility release target