Cette analyse est actuellement disponible en anglais. Le texte original est conservé pour préserver la précision des conseils et détails techniques.
Les dates, informations techniques et affirmations restent dans leur langue d’origine.
Compliance · Sarah Reid · 2026-09-30
Evidence starts with live configuration
A posture report is meaningful only when it reads the rules, settings, identity coverage, and telemetry that are actually active. A rule that exists but is disabled is a gap, not a pass.
That sounds obvious until a review is assembled from policy PDFs, screenshots, and a configuration export taken months apart. A useful assessment starts from the system's current state and makes uncertainty visible instead of smoothing it into a green result.
From obligation to scoped evidence
Framework expectation → Selected control → Live configuration → Observed telemetry → Assessment result
The module separates enforcement from assessment
The rules engine decides what traffic is allowed, blocked, or masked. The Compliance module reads that state and reports whether selected framework controls can be supported. A compliance gap is not itself a traffic decision.
What belongs in an evidence pack
AI-FW can report control status, rule state, relevant settings, retention information, inventory evidence, and named attestations. Evidence packs are designed to avoid prompt and response content unless your separate logging policy allows content capture.
Plan the work outside the gateway
System classification, risk assessments, contracts, training, quality management, and conformity work remain organizational responsibilities. Use the framework pages to separate the runtime work from the work your legal, security, and compliance teams must own.
The most credible compliance conversation is often a boundary statement: here is what the product assesses, here is the scope it observed, here is the evidence it generated, and here is the work still requiring a named owner. That is more useful than a promise that one product makes an organization compliant.