Primary sources
Trace every conclusion to its origin
Regulatory records retain the official source, source type, jurisdiction, date and version.
Trust
Evidence your reviewers can inspect.
Every Trusq record keeps the official source, system context, version, review state and decision history together—so your team can reconstruct what was known, what changed and what happened next.
One chain, source to verifiable export
A reviewer can walk the whole record: the official text Trusq read, the rule-corpus version behind the obligation mapping, the named human review, the evidence version and the signature that lets them verify the export without us.
- Official sourceRegulation (EU) 2026/1744EUR-Lex text with its retrieval date
- Corpus version2026-07-16The exact rule-corpus version behind this obligation mapping
- Human reviewReviewed 2 Sep 2026Named reviewer, recorded with the decision
- Evidence versionAnnex IV pack v4Approved version, superseded ones retained
- Package verificationsha256 + RSA signatureManifest hash chain you can verify without Trusq
Verify it without us.Recompute the manifest hash and check the signature against the public key. Package-level hashes and signatures prove the package has not been altered since export. They say nothing about whether the evidence inside it is accurate or sufficient.
sha256 4f2b…8e1c · trusq-audit-key.pemChange history
See the baseline and every relevant update
Rule releases and registered system updates remain connected to the review they triggered.
Review control
Keep approval explicit
Evidence drafts, review states, owners and approval decisions remain visible in the record.
Tamper-evident export
Verify the dossier package
Package-level hashes, signatures and checkpoint continuity let anyone verify independently that an exported package has not been altered since export. They say nothing about whether the evidence inside it is accurate or sufficient. Download the public verification key →
Procurement evidence
Security and operations
Review current hosting, access, encryption, backup and operational answers in one place.
Data and reporting
Inspect the service providers, processing roles and vulnerability-reporting route before onboarding.
Bring Trusq evidence into your governance framework
Use source-linked Trusq records alongside the management, risk and control processes your organisation already operates.
ISO/IEC 42001
Support continual AI management
Connect system ownership, regulatory changes, review actions and versioned evidence to the continual-improvement work in your AI management system.
NIST AI RMF
Keep Govern, Map and Manage connected
Use the system register, affected-system context and action history as traceable inputs to your organisation’s AI risk management process.
These framework references show where Trusq records can strengthen the governance process your organisation already operates.
Clear responsibility
Trusq keeps the source, system facts, approval and history together so your authorised team and its reviewers can examine and approve each decision.