Trust
Enterprise trust
The Trust Desk answers buyer security and AI-governance questionnaires from evidence a company has already approved. This page states what that means in practice and, just as importantly, what we do not claim.
Answers come from your approved documents
A response is drafted only from passages retrieved out of documents your team has uploaded, scoped and approved. Nothing is drafted from the model's own knowledge of your company, and every sentence in a draft carries the source it came from.
A person approves every released answer
Drafts are proposals. Release requires a named reviewer, and the database refuses to record an approval when evidence is missing, contradictory, expired, or the draft is unsupported.
Disagreeing sources block, they do not average
When two current approved documents make incompatible statements, the question is blocked and both claims are shown side by side with document, version, effective date and owner. The model is never allowed to pick which one is true.
Uploaded text cannot give instructions
Document text is passed to the model as fenced, labelled data underneath fixed rules. A draft that echoes those rules, or that asserts a certification the evidence does not contain, is rejected rather than shown.
AI processing in this deployment
Loading current configuration…
What we do not claim
None of the following are held by QuadRupleLabs today, and the product will not state them on your behalf either. A questionnaire asking for one of them returns “evidence required” until an authoritative artifact is uploaded and approved.
- · SOC 2 Type I or Type II
- · ISO/IEC 27001, 27017, 27018 or 42001
- · HIPAA compliance or a signed BAA
- · GDPR certification (a certification does not exist for GDPR in this form)
- · EU AI Act conformity assessment
- · Zero data retention by the AI provider, unless verified for the account in use
- · PCI DSS or FedRAMP
Pilot status
The Trust Desk is in controlled first-customer pilot. It is suitable for evaluating drafting quality, evidence governance and reviewer workflow. It is not yet independently audited, and pilot workspaces should not be the sole system of record for a regulated process.