Trust

The questions your procurement team will ask — answered

An assurance firm has to meet the standard it holds others to. This page sets out how we protect independence, confidentiality and the integrity of every report.

Independence

Safeguards built into how we work

We don't build or resell AI

No product of our own is being judged, and no vendor pays us to favour theirs.

Separation of remediation and evaluation

The people who help fix a system never re-evaluate that same system.

Fees never follow the grade

We are paid for the work, never for the outcome.

Conflicts declared up front

Any relationship with a client, vendor or system is declared before an engagement starts.

Peer-reviewed reports

Every report is reviewed by a second qualified practitioner before it is issued.

Practitioners

WisdomBridge-qualified practitioners

Every engagement is led by a practitioner qualified on the WisdomBridge method — trained, assessed on supervised delivery, and peer-reviewed on every report. Practitioners bring professional grounding in AI governance, information security or quality engineering, and recognised credentials in those fields are verified before they are relied on.

During scoping, you receive

The named practitioners assigned to your engagement
Their backgrounds and verified credentials
Their declared conflicts of interest — or a statement of none

Confidentiality

Your data, handled like evidence

NDA as standard

Every engagement is covered by a mutual NDA before any information is exchanged.

Least access

We request the minimum access needed — sandbox or supervised sessions over production wherever possible.

No code required for the AI TrustGap

The self-assessment asks about controls and evidence. It never asks for code, credentials or customer data.

Held-out sets stay held out

Test sets we design for an engagement are never shared with the vendor being evaluated.

Return or delete

Client data is returned or deleted at the end of an engagement unless you ask us to keep it for re-evaluation.

No publication without permission

We never publish results or name clients without written permission.

Report integrity

Reports you can defend

Versioned method

Question banks, scoring models and severity scales carry version numbers, so any result can be traced to the method that produced it.

Dated and scoped

Every report states what was tested, on what data, against which exit criteria, and when.

Every number with its working

Scores arrive with the set size, the pass rule and the failures — or they are not published.

Clear basis

Self-attested results, expert review and independent testing are always labelled for what they are.

Frameworks

Aligned with the frameworks your teams use

NIST AI RMFISO/IEC 42001EU AI ActOWASP Top 10 for LLM ApplicationsMITRE ATLAS

Our method is aligned with and informed by these frameworks; findings are mapped to them so they slot into your existing governance. WisdomBridge reports are independent evaluations and assessments — they are not certificates of conformity, and we do not present them as such.

Need something for vendor onboarding?

Security questionnaires, NDA templates and engagement terms are available on request.

Request the onboarding pack

All contact routes →