Established standard
ISO/IEC 42001
A management system written specifically for AI.
PASS
PASS · AI assurance
Your GRC was written before AI. PASS goes where it cannot.
PASS (Project Assurance Software Solution) for AI. Most governance systems were designed for software that changes on a release schedule. AI does not. PASS is the assurance layer built for AI, and it reports back into the tools you already run.
Model registerTM-MOD-00317
- Claims triage v4CurrentISO 42001 · high riskas at12 Feb 2026
- Branch vision · safetyAgeingEU AI Act · limited riskas at30 Oct 2025
- Service assistant (LLM)LapsedEvaluation overdueas at18 Jul 2025
- Shadow model · financeUnknownDiscovered, unregisteredas atnever
Why AI breaks conventional GRC
AI introduces conditions your GRC was never written to read.
Traditional controls assume a system behaves predictably and changes on a schedule. Models drift, training provenance is often opaque, outputs can be confidently wrong, and unregistered AI spreads faster than any register can track. New standards exist because the older controls do not reach.
Established standard
EU AI Act
Phased, risk based obligations for AI systems placed on the market.
Established standard
NIST AI RMF
Risk management practices for AI, from mapping through measurement.
Where it sits
Deep on AI. Built to fit what you already run.
PASS does not ask you to remove your GRC or IRM platform. It sits as a specialist layer beneath it, goes considerably deeper on AI than a general system can, then pushes a structured record upward so AI risk appears alongside everything else you govern.
Enterprise GRC / IRM
what you already runRisk register
AI risk lands as a row, not an email
Audit and assurance
Evidence already gathered and dated
Board reporting
One line on condition, defensible
Structured AI risk record, pushed upward
Specialist layer
Testamark PASS
LiveDeeper on AI than a general platform can go, without replacing it.
01
Register
Every model, agent and vision system, with owner and lineage
02
Map
ISO 42001, EU AI Act, NIST AI RMF, mapped control by control
03
Observe
Evaluations, drift and behavioural evidence, dated
04
Publish
A structured record pushed upward into what you already run
Evidence read from the systems below
AI projects
where the risk actually livesCurrent
Vision at the edge
Cameras, detection, safety systems
Ageing
Language models
Assistants, summarisation, drafting
Unknown
Agents and automation
Tools acting on your systems
Start with the project
AI assurance begins one project at a time.
Assurance starts where AI risk actually lives, at the project. Hold a single project against the right controls before it reaches production, learn how your institution governs AI, then take that model and scale it. Project level records roll up into one organisational view.
Use cases
From edge cameras to large language models.
Vision at the edge
Computer vision cameras, on the ground.
Safety cameras and operational vision systems. PASS holds accuracy, privacy and consent, edge data handling and drift over time.
- Accuracy and validation
- Privacy and consent
- Edge data handling
- Drift monitoring
Language models
Assistants and agents built on large language models.
PASS holds data leakage, prompt injection, output accuracy, model provenance and human oversight.
- Data leakage controls
- Prompt injection defence
- Output evaluation
- Provenance and oversight
Your AI project
Whatever AI your institution is running.
Map the assurance model to any AI project, agent or system that needs to be held before it goes live, or while it is already running.
- Project based onboarding
- Control mapping to any stack
- Continuous evidence
- Roll up to the risk view
Education and uplift
We build the capability, not only the controls.
Governing AI well needs people who understand it. Alongside the platform, SmartAIConnect runs training that lifts your teams' AI governance capability, so the discipline holds after we leave the room.
Partner program
Partner with us to set the standard.
We are building a partner network to lift AI governance across industry. If you advise, audit, implement or regulate in this field, we would like to work with you.
Speak with us
Pressure test how you govern AI today.
A working session with our AI governance leads, mapped to your own AI estate and standards program.
PASS Terms & Conditions