01The six layers of TRACES.
A trustworthy AI system isn't a clever model with a text box. It's the layers around it: where the answers come from, what the system may claim, what gets filtered, who may do what, what gets recorded, and who signs off before anything counts. We hold every AI system you use against those layers and rate each one: present, partial, or missing. Every AI incident you've heard of, from the airline chatbot that promised a discount that didn't exist to the newspaper with invented quotes, traces back to exactly one such missing layer. We use that lesson to point, not to frighten.
02The evidence.
What you can show today and what's missing: an AI use policy, an overview of which systems you run and what for, supplier agreements about your data, the privacy assessment where one is required, and proof that your people know what they're doing (that obligation already applies). Measured against what your world actually gets asked for: education, research, publishing and consultancy each have their own requirements, and we know them.
03The people.
Does sign-off actually happen, or is someone ticking boxes without looking? Does the system keep your people sharp, or is it quietly taking over the thinking? This is the part of the assessment almost nobody does, and for an organization that lives on thinking, perhaps the most important.