For auditors

Evidence without the archaeology.

Audit prep in days, not months. Fetch a signed evidence pack from a URL, verify it with public keys, and map it to 289 controls across 249 frameworks.

For auditors & GRC, step by step

Demo data

You learn: What happens at each step. You can: Step through it.

  1. Step 1 of 8

    KYE Protocol™

    KYE-EUAIACT-001

    Entity accountability mapping

  2. Step 2 of 8

    KYE Protocol™

    KYE-EUAIACT-002

    AI system & AI agent registry

  3. Step 3 of 8

    KYE Protocol™

    KYE-EUAIACT-003

    Capability manifest + risk classification

  4. Step 4 of 8

    KYE Protocol™

    KYE-EUAIACT-004

    Human oversight decision gates

  5. Step 5 of 8

    KYE Protocol™

    KYE-EUAIACT-005

    Runtime authority decision logs

  6. Step 6 of 8

    KYE Protocol™

    KYE-EUAIACT-006

    Technical documentation evidence pack

  7. Step 7 of 8

    KYE Protocol™

    KYE-EUAIACT-007

    Corrective action & revocation trail

  8. Step 8 of 8

    KYE Protocol™

    KYE-EUAIACT-008

    Provider / deployer / operator role mapping

How this widget is built
Demonstrates
KYE Protocol™
Components
  • The steps this page describes
Flow
Each step in order, as the page sets it out. Architecture diagram
Used on

How it works

Fetch a URL. Verify offline. Map to controls.

KYE Protocol™ hands you signed Evidence Packs™ mapped to the controls you already test against. 266 mappings across 13 horizontal frameworks, plus sector overlays (HIPAA via the v1.1 healthcare profile). You fetch the pack from a URL and verify it with public keys. You stop scheduling interviews.

SOC 2 · ISO 27001:2022 · PCI DSS 4.0 · PSD2/PSD3 · DORA · NIS2 · EU AI Act · ISO 42001 · NIST AI RMF · NIST 800-207 · NIST CSF · GDPR · FedRAMP

EU AI Act

10 controls. All on the rail.

  • KYE-EUAIACT-001 Entity accountability mapping
  • KYE-EUAIACT-002 AI system & AI agent registry
  • KYE-EUAIACT-003 Capability manifest + risk classification
  • KYE-EUAIACT-004 Human oversight decision gates
  • KYE-EUAIACT-005 Runtime authority decision logs
  • KYE-EUAIACT-006 Technical documentation evidence pack
  • KYE-EUAIACT-007 Corrective action & revocation trail
  • KYE-EUAIACT-008 Provider / deployer / operator role mapping
  • KYE-EUAIACT-009 High-risk workflow profile
  • KYE-EUAIACT-010 Post-market monitoring evidence hooks

Evidence types

Four signed projections, one verifiable chain.

  • Decision Map™ — per decision, a replayable graph of actor → principal → delegation → capability → authority → scope → state → policy → decision → audit → evidence.
  • Evidence Graph™ — decision ↔ authority grants ↔ capability manifests ↔ payloads ↔ audit events ↔ evidence packs.
  • Blast Radius Map™ — what breaks if a credential / capability / entity is compromised.
  • Compliance Map™ — projection from KYE™ objects to framework controls.

KYE™ Evidence Pack Viewer™ · for auditors & regulators

Replay decisions, verify signatures, map to controls.

Pick a sample evidence pack. Verify its signature offline against the publisher's published JWKS. Replay the bound Decision Map™ against the snapshot inputs. Walk the audit chain entries linked via audit_ref. Project the pack onto SOC 2, ISO 27001, EU AI Act, PSD3, or DORA controls via the KYE™ Compliance Mapping Rail™. Evidence, not screenshots.

Need the conformance pack?

Whitepaper & controlsDecision Map™ demoTalk to us

Ready to see your AI agents flagged?

Start in shadow mode. We’ll deliver your first Evidence Pack™ in 4–8 weeks.

Apply for pilot →Try the sandbox →

Canonical KYE™ surfaces referenced on this page: Evidence Pack™ · KYE™ Conformance Pack™ · KYE Protocol™.