Sovereign Ai Readiness Score — free AI tool

Data residency

• We have a documented data residency policy (which data, which jurisdictions, which exceptions)
• Customer-managed keys (BYOK) are mandatory for all AI workloads
• Sub-processors are disclosed with residency and 30-day change notification
• Data is not used to train any model (vendor attestation in place)
• Right-to-delete API is available and tested within the last 6 months

Security & compliance

• SOC 2 Type II report obtained within the last 12 months
• ISO 27001 / 27017 / 27018 certifications current
• Audit log export to SIEM with 7-year retention
• Right-to-audit clauses in master agreement
• Air-gapped deployment option exists for regulated workloads

Integration & architecture

• OpenAI-compatible API (no vendor lock-in, easy migration)
• Private endpoint deployable in our VPC / on-prem
• BYO model registry / weights
• RAG and embeddings supported natively
• Function calling and agent runtime supported

Governance & ops

• Dedicated CSM / named support contact
• Custom SLA with financial penalties
• 24/7 incident response with defined P1 / P2 / P3 SLAs
• Quarterly business reviews and roadmap influence
• Exit plan: portability of models, data, and embeddings