Trust Center
A single entry point for privacy, AI usage, security, incidents, models and due-diligence information.
MetaCore Platform · Trust / Governance / Evidence
Trust is not a promise. It is a verifiable contract.
MetaCore Trust Center is the public governance and assurance entry point for the Persistent AI Operating Platform: policy is separated from control, control from evidence, and evidence from claims that are not yet formally supported.
CLAIM→CONTROL→EVIDENCE→STATUS→REVIEW
LIVE PUBLIC SURFACES
What already exists as a public Trust surface.
A published route means the information surface exists. It does not by itself mean legal approval, certification or independent audit.
Security & Incident
Security Overview, Incident Response, Responsible Disclosure and the security contact are publicly reachable.
Model & Context Disclosure
AI model disclosure, Context Memory, Data Residency and Subprocessors are separated from marketing copy.
DOCUMENT MATURITY
A document URL and document maturity are two different things.
Until formal approval evidence exists, Trust Center documents are described by their actual maturity state.
1 · DRAFTWorking policy text / framework.
2 · REVIEWLegal, security or process review.
3 · APPROVEDFormal internal approval and owner.
4 · OPERATING EVIDENCEThe control operates and leaves a verifiable trace.
5 · DUE DILIGENCEEvidence can be provided within an agreed scope.
Current boundary: MetaCore does not claim “GDPR certified”, “NIS2 certified”, “AI Act compliant” or “ISO 27001 certified” without formal basis. Readiness and roadmap are not certification.
POLICY & DATA
Core governance document paths.
The surfaces are public; their legal maturity is assessed separately.
Privacy Policy
Personal data, purposes, rights, retention, export and deletion.
Terms of Service
Platform use relationship, boundaries and responsibilities.
AI Usage Policy
AI boundaries, Scoped Authority, contestability and accountability.
Credits Terms
KR / service-credit logic: internal service credits, not money or an investment instrument.
Data Processing Agreement
Framework for organizational data-processing terms.
Subprocessors
Third-party services, purpose, data categories and control.
GOVERNANCE SPINE
Trust is not only documentation.
Platform governance must connect identity, authority, context, AI/model transparency, security, audit and human decision authority.
Identity & Authority
Who the user is, which role/scope applies and who can approve significant actions.
Context & Data
Which sources are used, who owns context, and retention/export/deletion principles.
AI & Model Disclosure
The model is not the MetaCore platform; providers, memory boundaries and model-change principles should be transparent.
Security & Incident
Scope, credentials, audit, containment, recovery, rollback and post-mortem principles.
Evidence & DELTA
Outcome claims should be tied to a test, method, evidence level and explicit baseline.
Scoped Authority
Authority is resolved through canonical policy, authenticated role, delegated mandate and scope. AI may act only inside those boundaries and cannot self-expand them.
COMPLIANCE READINESS
Regulatory direction is shown as a state, not a badge.
Area
MetaCore direction
Public status
GDPR
Privacy by Design, minimization, retention, export/delete, DPA.
Readiness / Review
NIS2
Access, incidents, backup/recovery, suppliers and continuity.
Readiness
EU AI Act
Human oversight, transparency, risk classification and output review.
Readiness
ISO 27001
ISMS controls, ownership and audit-trail roadmap.
Roadmap
EVIDENCE ROUTES
Where to inspect a trace rather than a promise.
SECURITYSTATUS DISCLOSURE
Security
Operational security, access, incident and resilience architecture.
EVALUATIONDELTA
Baseline, rubric, evidence level and tests of what MetaCore structure adds.
System Status
Public platform status and incident-communication surface.
Responsible Disclosure
Vulnerability-reporting and safe security-testing channel.
ENTERPRISE DUE DILIGENCE
A serious AI-platform purchase begins with: “what can you prove?”
Trust Center is where MetaCore separates product claims, controls, document maturity and real operating evidence.