AI System Compliance Card™

The nutrition label for AI systems.

A KYE™ Compliance Card is a public-key-verifiable, machine-readable, human-readable summary of any AI system: its KYE™ bindings, the frameworks it satisfies, the freshness of its signed evidence, its recovery posture, and the date of its last attestation. One artefact, every audience — risk committees, EU AI Act notified bodies, SOC 2 auditors, customers, your own engineers.

AI System Compliance Card, point by point

Demo data

You learn: The page's points, one at a time. You can: Step through them.

  1. Step 1 of 6

    KYE Protocol™

    Identity

    ClassAI agent Model familyTreasury-LLM-v3 Version3.2.1 (signed) Trust domainacme.eu

  2. Step 2 of 6

    KYE Protocol™

    Authority

    Delegation chainCFO → Regional Treasurer → Agent Capability profile pep ScopeUSD ≤ $5M / EU + US corridors Authority freshness4 min ago

  3. Step 3 of 6

    KYE Protocol™

    Frameworks satisfied

  4. Step 4 of 6

    KYE Protocol™

    Evidence freshness

  5. Step 5 of 6

    KYE Protocol™

    Recovery posture

    Cascade revoke< 1 second (tested 2026-05-03) Break-glass profile evidence-replay Open recoveries0 Last fire-drill2026-04-22

  6. Step 6 of 6

    KYE Protocol™

    Attestation

    Conformance levelL3 KYE™ Conformant™ Self-Attested™2026-05-04 Self-Tested™129/133 fixtures pass Public key ed25519:7f3a…e2c8

How this widget is built
Demonstrates
KYE Protocol™
Components
  • The points this page makes
Flow
Each point in order, as the page sets it out. Architecture diagram
Used on

Example card · Compliance Map™ projection

What an AI System Compliance Card™ looks like.

KYE™ Compliance Card · v1.0

Acme Treasury FX Router

kye:agent:acme.eu:treasury:fx-router

Signed · 2026-05-04 14:22 UTC Issuer: kye:trust:acme.eu

Identity

ClassAI agent Model familyTreasury-LLM-v3 Version3.2.1 (signed) Trust domainacme.eu

Authority

Delegation chainCFO → Regional Treasurer → Agent Capability profilepep ScopeUSD ≤ $5M / EU + US corridors Authority freshness4 min ago

Frameworks satisfied

  • PSD3 12 / 12 controls
  • DORA 18 / 18 controls
  • EU AI Act 10 / 10 high-risk Title III
  • ISO 27001 47 / 47 Annex A
  • SOC 2 64 / 64 TSC

Evidence freshness

  • Audit chain96%
  • Self-audit88%
  • Replay test100%
  • Signal-bus uptime99.94%

Recovery posture

Cascade revoke< 1 second (tested 2026-05-03) Break-glass profileevidence-replay Open recoveries0 Last fire-drill2026-04-22

Attestation

Conformance levelL3 KYE™ Conformant™ Self-Attested™2026-05-04 Self-Tested™129/133 fixtures pass Public keyed25519:7f3a…e2c8

This Compliance Card is a Compliance Map™ projection produced from the KYE™ audit chain. Verify the signature against the Issuer’s published key. KYE™ produces evidence; certifications remain the customer’s.

Who reads this card

One artefact, every audience.

Risk committee

The board sees a single freshness number per AI system, not a 200-page deck.

Auditor · 3PAO

Cross-references KYE™ bindings to OSCAL assessment-results and to the framework controls in scope.

Regulator · notified body

EU AI Act Title III high-risk technical documentation extracts straight from the card’s framework section.

Customer / partner

Procurement security review answered by URL: send the card link, not a 90-question questionnaire.

Internal engineering

Every PR can re-run the card; freshness regressions become a CI signal.

Legal / privacy

GDPR Art. 30 records-of-processing artefact links straight to capability + evidence-pack URNs.

Schema · URN

Card is a first-class KYE™ object.

  • URN kye:card:<trust-domain>:<subject-class>:<subject-local>:<version> — e.g. kye:card:acme.eu:agent:fx-router:v3.2.1.
  • Schema https://kyeprotocol.com/schemas/compliance-card.v1.json — JSON Schema 2020-12 draft. Card payload is signed by the issuer’s Ed25519 key.
  • Endpoint GET /v1/cards/{urn} · POST /v1/cards/{urn}/refresh regenerates from the latest audit chain.
  • Render Public-shareable HTML render at https://<trust-domain>/.well-known/kye/cards/<urn> — renderer ships with v1.1.
  • Cross-walk Card ⇄ OSCAL component-definition mapping: every Compliance Card has a deterministic OSCAL projection (see OSCAL compatibility).

Where to go next

Adjacent reading.

OSCAL compatibility →Compliance overviewReadiness self-testPer-framework referenceTalk to us

Ready to see your AI agents flagged?

Start in shadow mode. We’ll deliver your first Evidence Pack™ in 4–8 weeks.

Apply for pilot →Try the sandbox →

Canonical KYE™ surfaces referenced on this page: Evidence Pack™ · KYE Protocol™.