How do you manage model changes and versions?
No version reaches production without three conditions: an equal or better test result, a week with internal administrators and the written sign-off of the process owner. Every version is signed, archived and can be restored. Each one carries its model card and its row in the registry. Any change of base model is announced in advance.
The lifecycle reference is objective A.6 of Annex A of ISO/IEC 42001:2023. DEBIR is not certified under that standard and does not claim to be; it delivers the documents an auditor would ask for.
Sources
- DEBIR governance framework, rule 4 and commitment 5.
- ISO/IEC 42001:2023, Annex A, objective A.6, as a reference.
Regulatory framework verified against primary sources on November 1, 2026.
- What data leaves my perimeter when I use private AI?
- Do you use our customers’ data to train the model?
- How are data subject rights and the right to object to automated decisions handled?
- What happens if there is a data breach in the system?
- How is the system isolated from the internet and the public cloud?
Discovery sessions, no commitment
With technology, compliance and two process owners. Includes an offline demonstration prepared for your sector, without using your company’s data.
Inventory and obligations
Data in four levels and a first review of what your sector requires.
Three candidate use cases
And the Assessment proposal. The Discovery is credited against the Assessment.
Founding clients program
Three seats, with an explicit discount in exchange for a publishable case and a reference.
Terms
Discovery and evidence pilot at no cost, Assessment at a discount, in exchange for a publishable case, a reference and feedback. Continuous operation is always paid at list price.