Do you run controlled attack testing (red teaming), and who leads it?
Yes, before the pilot and at every major version. Your security team leads it, not us: it is part of independent validation. The report shows the attack success rate by category, the fix applied and the retest. Findings are fixed before the pilot.
The reference method is the OWASP Generative AI Red Teaming Guide (January 2025). The report goes into the evidence file as metric 5.
Sources
- DEBIR governance framework, commitment 4 (independent validation) and metric 5 (attack testing).
- OWASP GenAI Red Teaming Guide, January 2025.
Regulatory framework verified against primary sources on November 1, 2026.
- What data leaves my perimeter when I use private AI?
- Do you use our customers’ data to train the model?
- How are data subject rights and the right to object to automated decisions handled?
- What happens if there is a data breach in the system?
- How is the system isolated from the internet and the public cloud?
Discovery sessions, no commitment
With technology, compliance and two process owners. Includes an offline demonstration prepared for your sector, without using your company’s data.
Inventory and obligations
Data in four levels and a first review of what your sector requires.
Three candidate use cases
And the Assessment proposal. The Discovery is credited against the Assessment.
Founding clients program
Three seats, with an explicit discount in exchange for a publishable case and a reference.
Terms
Discovery and evidence pilot at no cost, Assessment at a discount, in exchange for a publishable case, a reference and feedback. Continuous operation is always paid at list price.