---
title: "KYE Protocol™ — For auditors & GRC"
description: "Signed evidence packs mapped to 13 compliance frameworks. KYE™ Compliance Mapping Rail™ binds every runtime control to the obligations frameworks impose."
url: https://kyeprotocol.com/auditors/
lang: en
source: "KYE Protocol"
---

> Signed evidence packs mapped to 13 compliance frameworks. KYE™ Compliance Mapping Rail™ binds every runtime control to the obligations frameworks impose.

For auditors

# Evidence without the archaeology.

Audit prep in days, not months. Fetch a signed evidence pack from a URL, verify it with public keys, and map it to 289 controls across 249 frameworks.

How it works

## Fetch a URL. Verify offline. Map to controls.

KYE Protocol™ hands you signed Evidence Packs™ mapped to the controls you already test against. 266 mappings across 13 horizontal frameworks, plus sector overlays (HIPAA via the v1.1 healthcare profile). You fetch the pack from a URL and verify it with public keys. You stop scheduling interviews.

SOC 2 · ISO 27001:2022 · PCI DSS 4.0 · PSD2/PSD3 · DORA · NIS2 · EU AI Act · ISO 42001 · NIST AI RMF · NIST 800-207 · NIST CSF · GDPR · FedRAMP

EU AI Act

## 10 controls. All on the rail.

- **KYE-EUAIACT-001** Entity accountability mapping
- **KYE-EUAIACT-002** AI system & AI agent registry
- **KYE-EUAIACT-003** Capability manifest + risk classification
- **KYE-EUAIACT-004** Human oversight decision gates
- **KYE-EUAIACT-005** Runtime authority decision logs
- **KYE-EUAIACT-006** Technical documentation evidence pack
- **KYE-EUAIACT-007** Corrective action & revocation trail
- **KYE-EUAIACT-008** Provider / deployer / operator role mapping
- **KYE-EUAIACT-009** High-risk workflow profile
- **KYE-EUAIACT-010** Post-market monitoring evidence hooks

Evidence types

## Four signed projections, one verifiable chain.

- **Decision Map™** — per decision, a replayable graph of actor → principal → delegation → capability → authority → scope → state → policy → decision → audit → evidence.
- **Evidence Graph™** — decision ↔ authority grants ↔ capability manifests ↔ payloads ↔ audit events ↔ evidence packs.
- **Blast Radius Map™** — what breaks if a credential / capability / entity is compromised.
- **Compliance Map™** — projection from KYE™ objects to framework controls.

KYE™ Evidence Pack Viewer™ · for auditors & regulators

## Replay decisions, verify signatures, map to controls.

Pick a sample evidence pack. Verify its signature offline against the publisher's published JWKS. Replay the bound Decision Map™ against the snapshot inputs. Walk the audit chain entries linked via `audit_ref`. Project the pack onto SOC 2, ISO 27001, EU AI Act, PSD3, or DORA controls via the KYE™ Compliance Mapping Rail™. _Evidence, not screenshots._

## Need the conformance pack?

[Whitepaper & controls](https://kyeprotocol.com/whitepaper/) [Decision Map™ demo](https://kyeprotocol.com/demos/) Talk to us

## Ready to see your AI agents flagged?

Start in shadow mode. We’ll deliver your first Evidence Pack™ in 4–8 weeks.

[Apply for pilot →](https://kyeprotocol.com/pilot-apply/) [Try the sandbox →](https://kyeprotocol.com/sandbox/demos/)

Canonical KYE™ surfaces referenced on this page: [Evidence Pack™](https://kyeprotocol.com/evidence-pack/) · [KYE™ Conformance Pack™](https://kyeprotocol.com/compliance/) · [KYE Protocol™](https://kyeprotocol.com/).