Audience: Compliance and risk

346 pages. Search every page with Ctrl K, or open the menu.

The platform 6 pages

ProfilesKYE™ has 10 canonical profiles, locked by constitution. Profiles define the conformance contract an implementation MUST support
Agentic Governance™Agentic Governance™ is the category KYE Protocol™ defines: governance FOR agentic systems — humans, AI agents, and hybrid authority — resolved to Authority…
Governance for the AI WebGovernance for the AI Web™: reduce Systemic Authority Risk™ across the web of humans and AI agents. KYE™ Lens™, KYE™ Site Authority™, KYE™ Build-Release…
KYE™ Cross-Jurisdiction Handoff Rail™The KYE™ Cross-Jurisdiction Handoff Rail™ delivers Agentic Governance™ with Authority Finality™ across borders: a regulatory act performed under one…
Open Agent Governance Foundation™The Open Agent Governance Foundation™ is the open working group standardising Agentic Governance™ — shared schemas, evidence formats, and conformance for…
Selective AI SovereigntySelective AI sovereignty is staying in control when conditions change — selective control across data, models and infrastructure in proportion to risk. KYE…

Products 23 pages

Authority Risk ProfilerThe KYE™ Authority Risk Profiler™: a read-only, customer-curated risk profile of your AI-agent estate. See your own clutter, overlaps, concentrations…
KYE™ Directory™KYE™ Directory™ is the public search surface across the authority graph. Find an entity, an authority grant, an evidence pack, a risk signal, or the blast…
KYE™ Authority Discovery™KYE™ Authority Discovery™ is a free assessment that inventories who and what can take consequential actions across your organisation — employees, contractors…
KYE™ Plugin Marketplace™The KYE™ Plugin Marketplace™. Install lightweight plugins for MCP tools, webhook verification, policy adapters, evidence exports, conformance tests, sandbox…
KYE™ Connector Profiles™KYE™ Connector Profiles™ make authority portable across 11 domain families — Commerce, Payment, Open Finance, Health, Pension, Agent Runtime, Security &…
KYE™ Sector PacksBrowse every KYE™ Authority Pack™ by sector — finance, health & life sciences, public sector, legal, industrial and cross-industry. Each pack governs an AI…
KYE™ Authority Risk Signal™The KYE™ Authority Risk Signal™ is a governed, Ed25519-signed feed of authority-failure events — denials, escalations, unauthorised attempts, authority drift…
KYE™ Compliance Observability Adapter™The KYE™ Compliance Observability Adapter™ pulls your GRC, observability, and eval telemetry into KYE™ as admissibility inputs and evidence. KYE™ turns sensed…
Enterprise AI governanceWhat enterprise AI governance is, what tier-1 procurement teams require, the open standard that lets you prove conformance, and how regulated banks deploy it.…
KYE™ Informed Approval™KYE™ Approval Brief™ assembles actor, principal, authority, scope, state, and risk into a structured, signed brief — so human approvers decide informed
KYE™ Managed Authority Operations™KYE™ Managed Authority Operations™ is the productised delivery mode in which KYE Protocol™ operates your governance, authority and evidence control plane — and…
KYE™ Underwriting & Risk-Acceptance Authority Agent™KYE™ Underwriting & Risk-Acceptance Authority Agent™ — a bounded, single-purpose KYE™ Governed Agent™ that govern accept/decline/refer within delegated limits.…
Compliance Evidence Export™Compliance Evidence Export™ is the KYE Protocol™ add-on that exports your signed §0.3 evidence packs as a scoped, portable, replay-verifiable file — the…
KYE™ Assurance Bundle™The KYE™ Assurance Bundle™ packages the core assurance add-ons — Audit Workspace™, control mapping, an authority risk register, Evidence Pack Pro, and Replay…
KYE™ Financial AI Authority Console™KYE™ Financial AI Authority Console™ governs AI agents taking consequential financial actions: every recommendation execution, portfolio rebalance, on-chain…
KYE™ GRC Integrations™Already on Drata, Vanta, or ServiceNow GRC? KYE Protocol™ plugs in, maps to your existing controls, and feeds them action-by-action runtime proof — no…
KYE™ Hardware & Electronics Engineering Authority Console™KYE™ Hardware & Electronics Engineering Authority Console™ governs AI agents acting across the hardware development lifecycle: every AI-assisted engineering…
KYE™ MAS MindForge Banking Authority Pack™KYE™ MAS MindForge Banking Authority Pack™ operationalises the MAS Project MindForge AI Risk Management: Operationalisation Handbook at runtime for Singapore…
KYE™ OCC Filing Readiness Pack™KYE™ OCC Filing Readiness Pack™ operationalises the U.S. OCC's supervisory expectations for consequential bank AI at runtime. Every consequential AI action is…
KYE™ Rule Pack Marketplace™Browse the KYE™ Rule Pack Marketplace™. Signed, conformance-verified rule packs across compliance, sector, and behaviour categories
KYE™ Shariah Operations Authority Agent™KYE™ Shariah Operations Authority Agent™ — a bounded, single-purpose KYE™ Governed Agent™ that govern recording and escalating a Shariah non-compliance (SNC)…
KYE™ Starter PacksKYE™ Starter Packs are turn-key bundles for specific sector x role x jurisdiction buyer contexts — UK Tier-1 bank SMF24, UK insurer CISO, EU DORA ICT Risk…
KYE™ Takaful Authority Agent™KYE™ Takaful Authority Agent™ — a bounded, single-purpose KYE™ Governed Agent™ that govern operator-side acts on a takaful risk fund. It is a first-class…

By sector 11 pages

KYE™ Delegated Auditability™Agentic payments, procurement agents, open finance, risk/compliance copilots — KYE™ Delegated Auditability™ for financial services
KYE™ AML & Financial-Crimes Governance Pack™The KYE™ AML & Financial-Crimes Governance Pack governs AI-assisted anti-money-laundering actions at the action boundary — the moment an AI agent disposes an…
KYE™ Chatbot Authority Pack™The KYE™ Chatbot Authority Pack™ proves the authority and evidence of consumer chatbot safeguard actions at the moment an interaction occurs — under the…
KYE™ Contract Workflow Authority Pack™The KYE™ Contract Workflow Authority Pack™ — a KYE™ Sector Pack Foundry™ expert-pack for UK legal practice. Binds every AI-assisted contract action to an open…
KYE™ HSE Authority Pack™The KYE™ HSE Authority Pack™ governs AI agents that author, interpret or approve safety-critical HSE documents — permits-to-work, risk assessments, method…
KYE™ Insurance Underwriting & Claims Authority Pack™The KYE™ Insurance Underwriting & Claims Authority Pack™ governs the authority and evidence of AI-assisted underwriting and claims decisions so they are…
KYE™ Model & Risk-Data Governance Pack™The KYE™ Model & Risk-Data Governance Pack™ governs the authority and evidence of model-driven decisions and risk-data flows so they are provable when the…
KYE™ Travel Rule Authority Pack™The Travel Rule Authority Pack™ — a KYE™ Sector Pack Foundry™ expert-pack delivering Agentic Governance™ with Authority Finality™ for VASP Travel Rule…
KYE™ Trading-Bot Model-Risk Authority Pack™The Trading-Bot Model-Risk Authority Pack™ — a KYE™ Sector Pack Foundry™ expert-pack delivering Agentic Governance™ with Authority Finality™ for AI trading-bot…
KYE™ Whistleblower & Speak-Up Authority Pack™The KYE™ Whistleblower & Speak-Up Authority Pack™ governs the authority and evidence of AI-assisted whistleblower / speak-up intake, triage, and case-handling…
Public Benefits AuthorityThe Dutch childcare-benefits scandal harmed tens of thousands of families through nationality-driven risk selection, unexplained decisions and repay-first…

Compliance, conformance & certification 256 pages

AI System Compliance CardThe KYE Protocol™ AI System Compliance Card is a public-key-verifiable, machine-readable, human-readable summary of an AI system's KYE™ bindings
Compliance frameworksPer-framework reference: which KYE Protocol™ controls map to which obligation, with framework scope, official source, and the canonical KYE™ Compliance…
Framework Coverage (machine-readable)Live machine-readable coverage of every regulatory framework KYE Protocol™ maps to: HAARF, MHRA, FDA TPLC, EU AI Act, NHS DSPT, NIST AI RMF, ISO/IEC 42001 +…
KYE™ Delegated Auditability™ (Evidence and reports)KYE™ adds a delegated-authority and evidence layer on top of your existing IAM, OAuth, API gateway, workflow, SIEM, GRC and AI-agent stack
Regulatory coverageKYE Protocol™ regulatory coverage: 249 frameworks decomposed into 853 requirement groups, each marked Enforced, Designed, or Out of scope — generated from a…
PlaybooksThree buyer-facing run-throughs for KYE Protocol™: how a buyer runs the 28-day Audit Pilot, how a vendor self-attests conformance, and how a…
Coverage heatmapCoverage heatmap of every regulatory framework KYE Protocol™ maps to. Rows are frameworks; columns are control families; cells are coverage %% rendered…
DORADORA — Digital Operational Resilience Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EU AI ActEU AI Act — Regulation (EU) 2024/1689 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
FedRAMPFedRAMP — Federal Risk and Authorization Management Program coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
GDPRGDPR — General Data Protection Regulation coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ISO/IEC 42001:2023ISO/IEC 42001:2023 — AI Management System (AIMS) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
KYE™ Audit Pilot™A 28-day, shadow-mode-only KYE™ Audit Pilot™ from kickoff to signed pilot report. Concrete steps, named artefacts, regulatory-citation table, owner…
NIS2NIS2 — Network and Information Security Directive coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NIST AI Risk Management Framework 1.0 + PlaybookNIST AI Risk Management Framework 1.0 + Playbook coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NIST Cybersecurity Framework 2.0NIST Cybersecurity Framework 2.0 — Core + Tiers + Profiles coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
PCI DSS 4.0PCI DSS 4.0 — Payment Card Industry Data Security Standard coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
SOC 2SOC 2 — Trust Services Criteria coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NIST 800-53 Rev 5 hub (universal control taxonomy)NIST 800-53 Rev 5 is the universal control taxonomy KYE Protocol™ uses as the hub for every regulatory crosswalk. 20 control families, 25 headline controls…
AAOIFI Auditing Standards (ASIFI)AAOIFI Auditing Standards (ASIFI) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AAOIFI Financial Accounting Standards (FAS)AAOIFI Financial Accounting Standards (FAS) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AAOIFI Governance Standards (GSIFI)AAOIFI Governance Standards (GSIFI) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AAOIFI Shariah StandardsAAOIFI Shariah Standards coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ABA Model Rules of Professional Conduct (AI-relevant duties)ABA Model Rules of Professional Conduct (AI-relevant duties) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act, GDPR-aligned)Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act, GDPR-aligned) coverage by KYE Protocol™ — every requirement…
Act No. 18/2018 Coll. on Personal Data ProtectionAct No. 18/2018 Coll. on Personal Data Protection coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AI Playbook for the UK GovernmentAI Playbook for the UK Government coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AI Solutions FrameworkAI Solutions Framework — Enterprise AI-Adoption Control Framework (IG1–IG3) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
AI Testing and Assurance Framework for the Public SectorAI Testing and Assurance Framework for the Public Sector coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AI-CAIQ (STAR-for-AI)AI-CAIQ (STAR-for-AI) — evidence-generated self-assessment coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AICPA SSTSAICPA SSTS — Statements on Standards for Tax Services coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AIFMD / UCITSAIFMD / UCITS — Fund Manager Authority, Risk Management & Investment Limits coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
Alberta PIPAAlberta PIPA — Personal Information Protection Act (Alberta) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
Algorithmic Transparency Recording Standard (ATRS)Algorithmic Transparency Recording Standard (ATRS) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
API 580 / API 581API 580 / API 581 — Risk-Based Inspection (RBI) for fixed equipment in the oil, gas and petrochemical industry coverage by KYE Protocol™ — every requirement…
APPIAPPI — Act on the Protection of Personal Information coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
APRA CPS 230APRA CPS 230 — Operational Risk Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ASD Essential Eight + ASD AI guidanceASD Essential Eight + ASD AI guidance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Australian Government Mandatory AI GuardrailsAustralian Government Mandatory AI Guardrails coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Bank Negara MalaysiaBank Negara Malaysia — Shariah Governance Policy Document 2019 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Basel Governance HubThe Basel Governance Hub maps every BCBS 239 principle (all 14) to the KYE Protocol™ artefact, event family, and verification gate that binds it — honest…
BC PIPABC PIPA — Personal Information Protection Act (British Columbia) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
BCBS 239BCBS 239 — Risk Data Aggregation & Risk Reporting Principles coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
BDSGBDSG — Bundesdatenschutzgesetz (Federal Data Protection Act, 2018) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
BSI AIC4BSI AIC4 — AI Cloud Service Compliance Criteria coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Canada Consumer-Driven Banking Framework (open banking)Canada Consumer-Driven Banking Framework (open banking) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
CBUAECBUAE — Higher Shariah Authority and Shariah Governance Standard coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
CDSCO Medical Devices Rules 2017CDSCO Medical Devices Rules 2017 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Central Bank of BahrainCentral Bank of Bahrain — Shariah Governance Module coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Central Bank of JordanCentral Bank of Jordan — Islamic Banking Shariah Governance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
Central Bank of KuwaitCentral Bank of Kuwait — Shariah Supervisory Governance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Central Bank of NigeriaCentral Bank of Nigeria — Non-Interest (Islamic) Financial Institutions coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
Central Bank of OmanCentral Bank of Oman — Islamic Banking Regulatory Framework (IBRF) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Central Bank of SudanCentral Bank of Sudan — High Shariah Supervisory Board coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
CERT-In Cyber Security DirectionsCERT-In Cyber Security Directions coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
CIPSCIPS — Cross-Border Interbank Payment System (RMB) — payment-authority governance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
CISA CDMCISA CDM — Continuous Diagnostics and Mitigation (AI-agent asset accountability) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
CLIACLIA — US Clinical Laboratory Improvement Amendments (42 CFR Part 493) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Colorado SB21-169Colorado SB21-169 — Insurers' Use of External Consumer Data & AI coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Consultant stakeholder reportRepresentative report envelope for a Consultant Engagement. Synthetic tenant — Utilization · portfolio risk · certification expiry. Signed HTML; anyone with…
COSHHCOSHH — Control of Substances Hazardous to Health Regulations 2002 (UK) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
CSA AI Controls Matrix (AICM)CSA AI Controls Matrix (AICM) — execution-layer resolution coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Data Protection Act 2018Data Protection Act 2018 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Digital Personal Data Protection Act, 2023Digital Personal Data Protection Act, 2023 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Dodd-Frank §922 + SEC Rule 21FDodd-Frank §922 + SEC Rule 21F — Whistleblower Programme coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
DORA (Framework library)DORA — Digital Operational Resilience Act — control mappings to KYE Protocol™ canonical artefacts. Financial entities in the EU — credit institutions, payment…
DORA ICT Incident ReportingDORA ICT Incident Reporting — Article 19 + classification RTS coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
ECOA / Regulation BECOA / Regulation B — Equal Credit Opportunity Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Egypt FRAEgypt FRA — Islamic Finance Shariah Supervision coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EN 18286:2025EN 18286:2025 — Quality management system for high-risk AI systems coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
EU AI Act — Article 50 chatbot transparency (Regulation (EU) 2024/1689)EU AI Act — Article 50 chatbot transparency (Regulation (EU) 2024/1689) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
EU AI Act (AI governance frameworks)EU AI Act — Annex III High-Risk Insurance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EU AI Act (Framework library)EU AI Act — Articles 14 + 15 (Human Oversight + Accuracy/Robustness) — control mappings to KYE Protocol™ canonical artefacts. High-risk AI systems placed on…
EU AI Act timeline, corrected for the Digital OmnibusA metro-map view of the EU AI Act enforcement timeline, corrected for the adopted Digital Omnibus (PE-CONS 30/26): general application 2 August 2026, Annex III…
EU Cyber Resilience Act (CRA)EU Cyber Resilience Act (CRA) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EU Sixth Anti-Money Laundering Directive (6AMLD)EU Sixth Anti-Money Laundering Directive (6AMLD) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EU Whistleblower DirectiveEU Whistleblower Directive — Directive (EU) 2019/1937 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EW-AiRMEW-AiRM — Enterprise-Wide AI Risk Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
FATF 40 RecommendationsFATF 40 Recommendations — International AML/CFT Standards coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
FCA COBSFCA COBS — Conduct of Business Sourcebook (UK Investment Conduct) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
FCA CONCFCA CONC — Consumer Credit Sourcebook coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
FCA Consumer Duty (PRIN 2A)FCA Consumer Duty (PRIN 2A) — Principle 12 & the four outcomes coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
FCA MCOBFCA MCOB — Mortgage Conduct of Business (FCA Handbook) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
FCRAFCRA — Fair Credit Reporting Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
FDA + EMAFDA + EMA — AI / Provenance Expectations for AI-Derived Candidates in Regulated Pipelines coverage by KYE Protocol™ — every requirement bijection-mapped to the…
FRC Ethical StandardFRC Ethical Standard — Integrity, Objectivity & Independence for Auditors & Accountants coverage by KYE Protocol™ — every requirement bijection-mapped to the…
FSA AI / Model Governance Expectations for Financial InstitutionsFSA AI / Model Governance Expectations for Financial Institutions coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
GDPR (Whistleblowing)GDPR (Whistleblowing) — Special-Category & Data-Minimisation in Reports coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
GDPR Article 22GDPR Article 22 — Automated Decision-Making coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
GENIUS ActGENIUS Act — US payment stablecoin law coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
HAARFHAARF — Healthcare AI Agents Regulatory Framework coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
HAiPECRHAiPECR — Human-AI Pre-deployment Evidence & Certification Record coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
ICH Q1ICH Q1 — Stability Testing coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ICH Q10ICH Q10 — Pharmaceutical Quality System coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ICH Q2(R2)ICH Q2(R2) — Validation of Analytical Procedures coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ICH Q3ICH Q3 — Impurities coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ICH Q5ICH Q5 — Quality of Biotechnological Products coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ICH Q6ICH Q6 — Specifications coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ICH Q7ICH Q7 — Good Manufacturing Practice for Active Pharmaceutical Ingredients coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
ICH Q8(R2)ICH Q8(R2) — Pharmaceutical Development coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ICH Q9(R1)ICH Q9(R1) — Quality Risk Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
IEC 61508:2010IEC 61508:2010 — Functional safety of electrical/electronic/programmable electronic safety-related systems coverage by KYE Protocol™ — every requirement…
IEC 61511:2016IEC 61511:2016 — Functional safety: Safety instrumented systems for the process industry sector coverage by KYE Protocol™ — every requirement bijection-mapped…
IFSB Prudential Standards (suite)IFSB Prudential Standards (suite) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
IFSB-10IFSB-10 — Guiding Principles on Shari'ah Governance Systems coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
IMDA AI VerifyIMDA AI Verify coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Investment Mandate / IPSInvestment Mandate / IPS — Investment Policy Statement & Discretionary Mandate Authority coverage by KYE Protocol™ — every requirement bijection-mapped to the…
ISA (UK)ISA (UK) — International Standards on Auditing (UK) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ISO 15189:2022ISO 15189:2022 — Medical laboratories — Requirements for quality and competence coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
ISO 45001ISO 45001 — Occupational Health & Safety Management Systems coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
ISO/IEC 27001:2022ISO/IEC 27001:2022 — Information Security Management Annex A + Clauses 4-10 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
ISO/IEC 38507:2022ISO/IEC 38507:2022 — Governance implications of the use of AI by organizations coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
ISO/IEC 42001:2023 (Framework library)ISO/IEC 42001:2023 — AI Management Systems — control mappings to KYE Protocol™ canonical artefacts. Any organisation that provides, develops, or uses AI…
KYE™ conformance runA vendor playbook for running the 129-fixture KYE™ conformance pack against your gateway, generating a signed conformance-report.json, and posting the…
KYE™ Framework Ingestion Engine™The KYE™ Framework Ingestion Engine™ delivers Agentic Governance™ with Authority Finality™ at the source: a regulatory or expert framework is turned into a…
Law 125(I)/2018 (providing for the protection of natural persons with regard to the processing of personal data)Law 125(I)/2018 (providing for the protection of natural persons with regard to the processing of personal data) coverage by KYE Protocol™ — every requirement…
Law 4624/2019 (measures implementing the GDPR)Law 4624/2019 (measures implementing the GDPR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Law No. 190/2018 (implementing measures for the GDPR)Law No. 190/2018 (implementing measures for the GDPR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Lei n.º 58/2019 (assegura a execução do RGPD)Lei n.º 58/2019 (assegura a execução do RGPD) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Loi du 30 juillet 2018Loi du 30 juillet 2018 — Belgian Data Protection Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
LOPDGDDLOPDGDD — Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales coverage by KYE Protocol™ — every requirement…
MAS FEAT PrinciplesMAS FEAT Principles coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MAS Project MindForgeMAS Project MindForge — AI Risk Management: Operationalisation Handbook coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
MAS Technology Risk Management GuidelinesMAS Technology Risk Management Guidelines coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MHRA Medical Devices Regulations 2002MHRA Medical Devices Regulations 2002 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MHRA Post-Market Surveillance Regulations 2025MHRA Post-Market Surveillance Regulations 2025 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MHRA SaMD & AI Change ProgramMHRA SaMD & AI Change Program coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MiFID IIMiFID II — Markets in Financial Instruments Directive II (Investment Services Conduct) coverage by KYE Protocol™ — every requirement bijection-mapped to the…
MIT AI Risk RepositoryMIT AI Risk Repository — Domain Taxonomy coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MSHAMSHA — Mine Safety and Health Administration standards (30 CFR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
NAIC Model Bulletin on the Use of AI by InsurersNAIC Model Bulletin on the Use of AI by Insurers coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NERC CIPNERC CIP — Critical Infrastructure Protection Reliability Standards (North American bulk electric system) coverage by KYE Protocol™ — every requirement…
New Zealand Privacy Act 2020New Zealand Privacy Act 2020 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
nFADP / revDSGnFADP / revDSG — revised Federal Act on Data Protection (in force 1 Sept 2023) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
NIS2 Incident ReportingNIS2 Incident Reporting — Article 23 (24h / 72h) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NIST CSF 2.0NIST CSF 2.0 — RESPOND & RECOVER coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NIST SP 800-207NIST SP 800-207 — Zero Trust Architecture coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NIST SP 800-53 Rev 5NIST SP 800-53 Rev 5 — Configuration Management (CM) family coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
NYC Local Law 144NYC Local Law 144 — Automated Employment Decision Tools coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
NYDFS Insurance Circular Letter on AINYDFS Insurance Circular Letter on AI coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
OCC AI Supervisory ExpectationsOCC AI Supervisory Expectations — Model Risk · Third-Party Risk · New-Activity / Filing Readiness coverage by KYE Protocol™ — every requirement…
OECD Good Laboratory Practice (Principles, 1998) + FDA 21 CFR Part 58OECD Good Laboratory Practice (Principles, 1998) + FDA 21 CFR Part 58 — non-clinical lab data integrity coverage by KYE Protocol™ — every requirement…
OECD Pillar TwoOECD Pillar Two — GloBE Rules (Global Minimum Tax) & BEPS coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
OJK / DSN-MUIOJK / DSN-MUI — Indonesian Shariah Governance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
OSFI Guideline B-13OSFI Guideline B-13 — Technology & Cyber Risk Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
OWASP Top 10 for Agentic Applications (Agentic AI Threats & Mitigations)OWASP Top 10 for Agentic Applications (Agentic AI Threats & Mitigations) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
PCI DSS v4.0PCI DSS v4.0 — Payment Card Industry Data Security Standard — control mappings to KYE Protocol™ canonical artefacts. Any entity that stores, processes, or…
Personal Data Protection Act (amended 2019 to implement the GDPR)Personal Data Protection Act (amended 2019 to implement the GDPR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Personopplysningsloven (LOV-2018-06-15-38)Personopplysningsloven (LOV-2018-06-15-38) — GDPR incorporated via the EEA Agreement coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
PHIPA (Ontario)PHIPA (Ontario) — Personal Health Information Protection Act, 2004 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
PIPEDAPIPEDA — Personal Information Protection and Electronic Documents Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
PMDA Software-as-a-Medical-Device (SaMD) PathwayPMDA Software-as-a-Medical-Device (SaMD) Pathway coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
PRA SS1/23PRA SS1/23 — Model Risk Management Principles for Banks coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Privacy Act 1988 (Cth)Privacy Act 1988 (Cth) — ADM transparency + APPs coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Production Action AuthorityProduction Action Authority — SOC 2 CC8 Change Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
PSD2 / PSD3PSD2 / PSD3 — EU Payment Services Directive coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Qatar Central BankQatar Central Bank — Shariah Supervision and Governance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
RBI IT Governance Master DirectionRBI IT Governance Master Direction coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Reg ZReg Z — TILA Billing-Error Resolution (12 CFR 1026.13) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
SAFRSAFR — Safeguards for Agentic Finance at Runtime coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Saudi Central BankSaudi Central Bank — Shariah Governance Framework coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
SEC Cyber DisclosureSEC Cyber Disclosure — Item 1.05 (4 business days) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
SEC Investment Adviser Fiduciary DutySEC Investment Adviser Fiduciary Duty — Advisers Act of 1940 (Duty of Care & Loyalty) coverage by KYE Protocol™ — every requirement bijection-mapped to the…
Singapore SASHSingapore SASH — Detecting Offensive Cyber Agents (Defence-in-Depth) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
SOX §404SOX §404 — Internal Control over Financial Reporting (tax-provision controls) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
SOX §806SOX §806 — Whistleblower Anti-Retaliation (18 U.S.C. §1514A) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
SR 11-7SR 11-7 — Model Risk Management — control mappings to KYE Protocol™ canonical artefacts. Banking — model risk management for all regulated banking…
State Bank of PakistanState Bank of Pakistan — Shariah Governance Framework coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
TARGET2 / T2 RTGS (ECB)TARGET2 / T2 RTGS (ECB) — payment-authority governance incl. Settlement Finality Directive 98/26/EC coverage by KYE Protocol™ — every requirement…
Tietosuojalaki (1050/2018)Tietosuojalaki (1050/2018) — Data Protection Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
TKBBTKBB — Participation Banking Standards (Türkiye) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UAVGUAVG — Uitvoeringswet Algemene verordening gegevensbescherming (GDPR Implementation Act, 2018) coverage by KYE Protocol™ — every requirement bijection-mapped…
UK AI Assurance (DSIT)UK AI Assurance (DSIT) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UK AI Regulatory FrameworkUK AI Regulatory Framework coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UK Faster Payments (FPS)UK Faster Payments (FPS) — payment-authority governance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UK FCAUK FCA — Firm-Level Shariah Supervisory Board Model coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UK GAAPUK GAAP — FRS 102 / FRS 105 Recognition, Measurement & Disclosure coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
UK Making Tax Digital (MTD)UK Making Tax Digital (MTD) — Digital Record-Keeping & API Filing coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
UK Money Laundering Regulations 2017 (MLR 2017)UK Money Laundering Regulations 2017 (MLR 2017) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UK PIDAUK PIDA — Public Interest Disclosure Act 1998 (ERA 1996 Part IVA) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
US 2 CFR 200US 2 CFR 200 — Uniform Guidance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
US Bank Secrecy Act / FinCENUS Bank Secrecy Act / FinCEN — AML Program, CDD & SAR Requirements coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
US EO 14110US EO 14110 — Safe, Secure & Trustworthy AI (biosecurity / dual-use provisions) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
US State AI-Chatbot LawsUS State AI-Chatbot Laws — consumer chatbot safeguards coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych (Personal Data Protection Act)Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych (Personal Data Protection Act) coverage by KYE Protocol™ — every requirement bijection-mapped to the…
Voluntary Code of ConductVoluntary Code of Conduct — Advanced Generative AI (Canada) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
Wolfsberg Group AML Principles & GuidanceWolfsberg Group AML Principles & Guidance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
AIDAAIDA — Artificial Intelligence and Data Act (Bill C-27, federal) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Australia GroupAustralia Group — Biological & Chemical Dual-Use Export Controls coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
BruneiBrunei — Syariah Financial Supervisory Board and BDCB coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
CLC Code of ConductCLC Code of Conduct — Council for Licensed Conveyancers coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Codice in materia di protezione dei dati personali (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018)Codice in materia di protezione dei dati personali (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018) coverage by KYE Protocol™ — every requirement…
CWC + BWCCWC + BWC — Chemical Weapons Convention & Biological Weapons Convention coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
Databeskyttelsesloven (Lov nr. 502 af 23. maj 2018)Databeskyttelsesloven (Lov nr. 502 af 23. maj 2018) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Datenschutzgesetz (DSG, BGBl. I Nr. 165/1999, as amended 2018)Datenschutzgesetz (DSG, BGBl. I Nr. 165/1999, as amended 2018) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
DoD 5015.02-STDDoD 5015.02-STD — Electronic Records Management Software Applications Design Criteria coverage by KYE Protocol™ — every requirement bijection-mapped to the…
EC-Council ADGEC-Council ADG — Adopt · Defend · Govern coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EEOC Uniform Guidelines on Employee Selection ProceduresEEOC Uniform Guidelines on Employee Selection Procedures coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
EU DACEU DAC — Directive on Administrative Cooperation (DAC6 mandatory disclosure + DAC7) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
EU Evidence Regulation 2020/1783 + eIDASEU Evidence Regulation 2020/1783 + eIDAS — Evidence Authenticity & Transmission coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
Fed SR 11-7Fed SR 11-7 — Supervisory Guidance on Model Risk Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
FRCP e-DiscoveryFRCP e-Discovery — Rules 26 / 34 / 37 + FRE 502 (privilege) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
FRE 901 / 902FRE 901 / 902 — Authentication & Self-Authentication of Evidence coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Google SREGoogle SRE — Change Management (progressive rollout & rollback) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
HM Land RegistryHM Land Registry — Registration & Digital Identity Standard (Safe Harbour) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
HMT Magenta BookHMT Magenta Book — Evaluation Guidance coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
HMT Orange BookHMT Orange Book — Management of Risk coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Homes England Capital Funding GuideHomes England Capital Funding Guide — Shared Ownership (model lease) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
ICRAAICRAA — California Investigative Consumer Reporting Agencies Act coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
IIFM Documentation StandardsIIFM Documentation Standards coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
IRS Circular 230IRS Circular 230 — Regulations Governing Practice before the Internal Revenue Service coverage by KYE Protocol™ — every requirement bijection-mapped to the…
ISO 14001ISO 14001 — Environmental Management Systems coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ISO 15489-1:2016ISO 15489-1:2016 — Information and Documentation · Records Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
ISO 16175-1:2020ISO 16175-1:2020 — Processes and Functional Requirements for Software for Managing Records (digital records) coverage by KYE Protocol™ — every requirement…
ISO 21448:2022ISO 21448:2022 — Safety Of The Intended Functionality (SOTIF) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces…
ISO 23081-1:2017ISO 23081-1:2017 — Managing Metadata for Records (records metadata) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
ISO 31000:2018ISO 31000:2018 — Risk management — Guidelines coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ISO 55000 / ISO 55001:2014ISO 55000 / ISO 55001:2014 — Asset management — Management systems coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
ISO 9000:2015ISO 9000:2015 — Quality management systems (fundamentals & vocabulary) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
ISO/IEC 17025:2017ISO/IEC 17025:2017 — General requirements for the competence of testing and calibration laboratories coverage by KYE Protocol™ — every requirement…
ISO/IEC 20000-1ISO/IEC 20000-1 — Service Management (change management, §8.5.1) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
ISO/IEC 27035ISO/IEC 27035 — Incident Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
IT Rules 2021IT Rules 2021 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
ITIL 4ITIL 4 — Change Enablement (change authority & assessment) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordningLag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
Law Society Conveyancing ProtocolLaw Society Conveyancing Protocol coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Loi du 1er août 2018 portant organisation de la Commission nationale pour la protection des donnéesLoi du 1er août 2018 portant organisation de la Commission nationale pour la protection des données coverage by KYE Protocol™ — every requirement…
Loi Informatique et Libertés (Act No. 78-17, as amended) + CNILLoi Informatique et Libertés (Act No. 78-17, as amended) + CNIL coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Mastercard Chargeback StandardsMastercard Chargeback Standards — Dispute Resolution & Arbitration coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
MiCAMiCA — Markets in Crypto-Assets Regulation coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MoReq2010MoReq2010 — Modular Requirements for Records Systems coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
MOW Search Only Terms Contract (SOC)MOW Search Only Terms Contract (SOC) — publisher content-access authority coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
Nucleic-Acid Synthesis ScreeningNucleic-Acid Synthesis Screening — IBBIS Common Mechanism + IGSC Harmonized Screening Protocol coverage by KYE Protocol™ — every requirement bijection-mapped…
NZ Algorithm Charter for Aotearoa New ZealandNZ Algorithm Charter for Aotearoa New Zealand coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
OSFI Guideline B-10OSFI Guideline B-10 — Third-Party Risk Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
OSFI Guideline E-23OSFI Guideline E-23 — Model Risk Management coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
OSHA PSMOSHA PSM — Process Safety Management of Highly Hazardous Chemicals (29 CFR 1910.119) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
PCMLTFA / FINTRACPCMLTFA / FINTRAC — Anti-Money-Laundering & Terrorist-Financing coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Permit-to-Work Systems (HSE HSG250 guidance)Permit-to-Work Systems (HSE HSG250 guidance) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
PSD2 SCA & Unauthorised-Transaction Liability (Arts. 72-74, 97)PSD2 SCA & Unauthorised-Transaction Liability (Arts. 72-74, 97) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Quebec Law 25Quebec Law 25 — Private Sector personal-information modernisation coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
RBNZ BS11RBNZ BS11 — Outsourcing Policy coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Reg EReg E — EFTA Error Resolution (12 CFR 1005.11) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
RIDDORRIDDOR — Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 (UK) coverage by KYE Protocol™ — every requirement bijection-mapped to the…
SEBI CSCRFSEBI CSCRF coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
TBS Directive on Automated Decision-Making (Canada federal government)TBS Directive on Automated Decision-Making (Canada federal government) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
The IIA's Three Lines Model (2020)The IIA's Three Lines Model (2020) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
The Sedona PrinciplesThe Sedona Principles — Best Practices for Electronic Document Production coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact…
UK Companies Act 2006UK Companies Act 2006 — Records, True & Fair Accounts & Companies House Filing coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
UK CPR Part 31 + PD 57ADUK CPR Part 31 + PD 57AD — Disclosure & the Disclosure Certificate coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
UK Equality Act 2010UK Equality Act 2010 coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UK Failure to Prevent Fraud (Economic Crime and Corporate Transparency Act 2023)UK Failure to Prevent Fraud (Economic Crime and Corporate Transparency Act 2023) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™…
UK Senior Managers & Certification Regime (SM&CR)UK Senior Managers & Certification Regime (SM&CR) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
UNESCO Recommendation on the Ethics of Artificial Intelligence (2021)UNESCO Recommendation on the Ethics of Artificial Intelligence (2021) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that…
Visa Compelling Evidence 3.0 (CE3.0)Visa Compelling Evidence 3.0 (CE3.0) coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.
Zákon č. 110/2019 Sb., o zpracování osobních údajůZákon č. 110/2019 Sb., o zpracování osobních údajů coverage by KYE Protocol™ — every requirement bijection-mapped to the KYE™ artefact that enforces it.

Solutions 5 pages

For buyersThe plain-English overview of KYE Protocol™ for boards, CIOs, risk, compliance, lawyers, bankers
For CISOsKYE Protocol™ gives CISOs a delegated-authority + evidence layer on top of existing IAM, OAuth, SIEM and GRC — runtime accountability for AI agents without…
KYE Protocol™ for SingaporeRuntime authority and signed evidence for Singapore AI — bijection-mapped to the MAS Technology Risk Management Guidelines, IMDA AI Verify and the MAS FEAT…
For auditors & GRCSigned evidence packs mapped to 13 compliance frameworks. KYE™ Compliance Mapping Rail™ binds every runtime control to the obligations frameworks impose.
KYE™ AI Adoption Navigator™The KYE™ AI Adoption Navigator™: a free, interactive pre-adoption self-assessment that maps where to use AI for the most value with the least unmanaged risk.…

Developer portal 6 pages

Connector Hub™The KYE™ Connector Hub™. Plug KYE Protocol™ into payment gateways, internet/mobile payment gateways, checkout, shopping carts, wallets, MCP servers, agent…
Documentation hubKYE Protocol™ documentation: vocabulary, ID format, schemas, SDKs, conformance pack, sector profiles, whitepaper. Curated reading order.
Free toolsFree, hands-on KYE Protocol™ tools you can use in your browser right now — the sandbox, the Authority Finality™ diagnostic, the Risk Profiler, the Evidence…
KYE™ Developers — ConformanceRun the suite. See the score. Ship the badge.
Operating ModelDeveloper guide for integrating against the KYE™ Operating Model API — capability declarations, scope contracts, runtime endpoints, and conformance fixtures.
software/constitution™Apache-2.0 open standard for codebases that enforce their own design principles at CI time. Language-agnostic. Provider-agnostic. Six rule classes. Five…

Engage 3 pages

Certification programThe KYE Protocol™ certification program. Five-tier ladder — Declared → KYE™ Self-Tested™ → KYE™ Self-Attested™ → KYE™ Conformant™ → KYE™ Certified™
KYE™ System Integrator™The KYE™ System Integrator™ track productises the canonical SI partner type: a three-tier, qualification-gated delivery programme — Associate (entry)…
Working groupsKYE Protocol™ working groups. Six open WGs — KYE™ Core, Open Banking, Agent Governance, Evidence & Audit, Capability Profile, Compliance Mapping

Resources 36 pages

Risk & mitigationThe KYE Protocol™ threat model: signing-key compromise, registry availability, false-positive denials, time-skew, replay, supply-chain risk…
Analyst Competitive LandscapeAnalyst competitive-landscape map for Agentic Governance™: how it relates to AI-governance, model-risk, and prompt-firewall categories — complementary inputs…
KYE™ Authority Risk Register™The board-facing aggregation surface over the audit chain. One row per (subject, gap_class) tuple. Each row binds back to the signed evidence envelope that…
FAQFrequently asked questions about KYE Protocol™ — Authority Finality™, conformance, deployment, integration, regulation, governance, profiles, roadmap.
Quiz60-second interactive quizzes on AI governance, authority risk, and regulator readiness. Get your scorecard, share it, and see the matched KYE Protocol™…
RoadmapKYE Protocol™ roadmap with dated milestones — v1.0 frozen April 2026, v1.0.x patch series, v1.1 preview profiles (Conformance Certification, Authority…
AI governance (KYE™ Learn™)A pre-deployment checklist for procurement, risk, and engineering. What to verify before agents touch a regulated workflow. Twelve items, each with the failure…
AI Legal BriefA financial-stability regulator has, in effect, told the market that a paragraph of instructions is not a control — reporting based on publicly available…
Roadmap to AI Governance for Financial ServicesFinancial institutions are deploying AI into decisions that regulators already supervise — creditworthiness, fraud, market and model risk — faster than their…
SR 11-7 for AI agentsThe 2011 Fed model risk guidance is back because agents take actions banks can't unwind. How the three-line model maps, what 'effective challenge' means, where…
The authority that outlived its purposeThe loudest AI-governance fear is the rogue agent.
The EU AI Act, explained for AI agentsRisk tiers, prohibited practices, high-risk obligations, GPAI rules — what each means when your AI is an agent that takes actions, not just produces text.
Who's in AI governanceCompliance suites, AI-risk newcomers, model-eval platforms, agent-governance specialists — who does what, what KYE Protocol™ does differently, and how to pick.
AI System Compliance Card™AI System Compliance Card™: The public-key-verifiable nutrition label for any AI system.
Annex III high-risk system (EU AI Act Art 6)Annex III high-risk system (EU AI Act Art 6): (EU AI Act Art 6)
Approval modesApproval modes: Locked set (§36 §6): none , single_approver , two_person , two_person_with_legal , delegated , auto (forbidden at high+ risk).
Approval QueueApproval Queue: Multi-reviewer queue with pending / high-risk / escalations / second-approval-pending / SLA-breached / evidence-gap views.
Conformance packConformance pack: The 133 black-box fixtures any implementation runs to demonstrate spec compliance.
Control mappingControl mapping: The named link from a protocol artefact to a regulatory control — e.g., evidence pack → SOC 2 CC7.2.
Discovery modesDiscovery modes: The standard set. directory_lookup , path_finder , graph_walk , risk_discovery , connector_discovery , evidence_finder .
DORA Art 6DORA Art 6 — ICT risk framework: — ICT risk framework
Entity Authority Record™Entity Authority Record™: Living governance record per delegated actor — owner, accountable entity, purpose, lifecycle state, risk tier, approved + prohibited…
EU AI Act Art 9EU AI Act Art 9 — Risk management: — Risk management
HAARF Risk-Reduction-per-EffortHAARF Risk-Reduction-per-Effort: HAARF v1.0 ranking heuristic for guard recommendations.
KYE™ Compliance Mapping Rail™KYE™ Compliance Mapping Rail™: The runtime channel through which evidence becomes per-framework projection.
KYE™ Conformant™KYE™ Conformant™: L3. Program-reviewed conformance report + badge + registry listing.
KYE™ Connector Discovery Hub™KYE™ Connector Discovery Hub™: The discovery surface for Connector Profile™ implementations and their conformance state.
KYE™ Discovery Console™KYE™ Discovery Console™: The operator surface over the directory + path finder + risk discovery.
KYE™ ExceptionKYE™ Exception: A rule that displaces or modifies another rule under enumerated exceptional conditions (incident response, business continuity, regulatory…
KYE™ Ontology Conformance™KYE™ Ontology Conformance™: Conformance fixture suite + certification track for ontology-correct implementations.
KYE™ Self-Tested™KYE™ Self-Tested™: L1 of the conformance ladder.
MHRA SaMD & AIMHRA SaMD & AI: UK Medicines and Healthcare products Regulatory Agency Software-as-a-Medical-Device regime.
ProfileProfile: One of 10 canonical conformance profiles — core , pdp , epdp , spdp , pep , runtime-authority , evidence-replay , connector , manifest , conformance .
Reports@kyeprotocol.comreports@kyeprotocol.com: The canonical auto-delivery From-address for sealed compliance reports.
Risk-discovery typesRisk-discovery types: Three non-mutating traversals.
SR 11-7 §VSR 11-7 §V — Model risk management: — Model risk management