Compliance & Sovereignty
Governance and Risk Assurance
Governance Overview
This documentation serves as a Technical Self-Assessment Dossier and does not replace official certification by notified bodies.
ABS CORE is not just a technical engine; it is a civil and criminal liability mitigation tool.
Assurance by Design
Unlike Black-Box solutions, ABS CORE implements:
- Forensic Auditability: Immutable logs via SHA-256.
- Sovereignty: 100% On-Premise, no data leakage to foreign clouds.
Regulatory & Compliance Alignment
Global Frameworks:
- [OK] EU AI Act (High-Risk Systems)
- [OK] NIST AI RMF 1.0
- [OK] ISO/IEC 42001 (AI Management)
Brazilian Regulations:
- [OK] LGPD (General Data Protection Law)
- [OK] PBIA 2024-2028 (Brazilian AI Policy)
- [OK] BNDES/FINEP Sector 6 Requirements
Security & Audit:
- [OK] SOC 2 Type II Controls Mapping
- [OK] HIPAA Safeguards (Healthcare deployments)
- [OK] FIPS 140-3 Cryptographic Modules
Public Sector:
- [OK] Notice 2.2 & 5.3 Compliance (Brazilian GovTech)