1<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/23b7a97ae3b5c134-s.p.226pwps5o-gq_.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/797e433ab948586e-s.p.0r6juujl39pe6.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/83afe278b6a6bb3c-s.p.2bn3s6zvc0dyp.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/99e609270109b47d-s.p.40sczeszzbjw1.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/effe91970fc4db64-s.p.0oace-s_gkfks.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/fba5a26ea33df6a3-s.p.18rizl4rsrl42.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" as="image" href="/icon.png"/><link rel="stylesheet" href="/_next/static/chunks/2f5cdtk75ohmm.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/chunks/2d02wacbptube.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/2zjueh7t2vecu.js"/>
1<script src="/_next/static/chunks/31ggvxg-2-lk5.js" async=""></script>
1<script src="/_next/static/chunks/408a7wmrwxntg.js" async=""></script>
1<script src="/_next/static/chunks/077buej14eccs.js" async=""></script>
1<script src="/_next/static/chunks/27jktro2p5rq9.js" async=""></script>
1<script src="/_next/static/chunks/turbopack-2g7-kis23x9yk.js" async=""></script>
1<script src="/_next/static/chunks/144oed4p6xizz.js" async=""></script>
1<script src="/_next/static/chunks/05-c3ty_6dwfk.js" async=""></script>
1<script src="/_next/static/chunks/2omxb_s-c15_c.js" async=""></script>
1<script src="/_next/static/chunks/2i97bpoltuqs4.js" async=""></script>
1<script src="/_next/static/chunks/0nfn0e7p_sr7v.js" async=""></script>
1<meta name="next-size-adjust" content=""/><title>Independent AI Security Assessments | Ayliea</title><meta name="description" content="Independent, evidence-backed AI security assessments for organizations deploying AI systems, agents, vendors, and workflows around sensitive data."/><meta name="keywords" content="AI security assessment,independent AI security assessment,AI vendor risk assessment,vendor security review,HIPAA AI assessment,NIST AI RMF assessment,healthcare AI vendor risk,signed AI security assessment,independent AI assessor,AI risk assessment healthcare,AI governance healthcare"/><link rel="canonical" href="https://ayliea.com"/><meta property="og:title" content="Independent AI Security Assessments | Ayliea"/><meta property="og:description" content="Independent, evidence-backed AI security assessments for organizations deploying AI systems, agents, vendors, and workflows around sensitive data."/><meta property="og:url" content="https://ayliea.com"/><meta property="og:type" content="website"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:title" content="Independent AI Security Assessments | Ayliea"/><meta name="twitter:description" content="Independent, evidence-backed AI security assessments for organizations deploying AI systems, agents, vendors, and workflows around sensitive data."/><link rel="icon" href="/favicon.ico?favicon.39dpkt9prs2_5.ico" sizes="48x48" type="image/x-icon"/><link rel="icon" href="/icon.png?icon.1vf49v44c5ckn.png" sizes="180x180" type="image/png"/><link rel="apple-touch-icon" href="/apple-icon.png?apple-icon.1vf49v44c5ckn.png" sizes="180x180" type="image/png"/>
1<script> 2 (function() { 3 try { 4 var theme = localStorage.getItem('theme'); 5 if (theme === 'dark') { 6 document.documentElement.setAttribute('data-theme', 'dark'); 7 } 8 } catch(e) {} 9 })(); 10 </script>
10<script src="/_next/static/chunks/0cz1d0mv5g_q7.js" noModule=""></script>
10</head><body class="inter_7b064e0d-module__MOT0tq__variable plus_jakarta_sans_218940a7-module__KK5t_a__variable ibm_plex_mono_78acdfb-module__83Xx8a__variable geist_deef94d5-module__Sms4YG__variable geist_mono_1bf8cbf6-module__FlyLvG__variable font-sans antialiased"><div hidden=""><!--$--><!--/$--></div>
10<script type="application/ld+json">{"@context":"https://schema.org","@type":"ProfessionalService","name":"Ayliea","description":"Independent AI security assessments for organizations deploying AI â a named CISSP assessor documents systems, evidence, findings, limitations, and remediation priorities in a signed report.","url":"https://ayliea.com","serviceType":"AI Security Assessment","areaServed":{"@type":"Place","name":"Worldwide"},"knowsAbout":["AI Security","Cybersecurity Assessment","NIST AI RMF","NIST CSF 2.0","CIS Controls","ISO 27001","SOC 2","HIPAA","Shadow AI"],"founder":{"@type":"Person","name":"Daviyon Daniels"}}</script>
10<script type="application/ld+json">{"@context":"https://schema.org","@type":"Organization","name":"Ayliea","url":"https://ayliea.com","logo":"https://ayliea.com/images/ayliea_logo.png","description":"Independent AI security assessments for organizations deploying AI â a named CISSP assessor documents systems, evidence, findings, limitations, and remediation priorities in a signed report.","founder":{"@type":"Person","name":"Daviyon Daniels"},"contactPoint":{"@type":"ContactPoint","email":"[email protected]","contactType":"customer service","availableLanguage":"English"},"address":{"@type":"PostalAddress","addressLocality":"Oklahoma City","addressRegion":"OK","addressCountry":"US"},"hasOfferCatalog":{"@type":"OfferCatalog","name":"AI Security Assessment Engagements","itemListElement":[{"@type":"Offer","price":"3500","priceCurrency":"USD","itemOffered":{"@type":"Service","name":"AI Security Review â Ayliea","description":"Focused independent review for one defined AI system, workflow, or use case."}},{"@type":"Offer","price":"7500","priceCurrency":"USD","itemOffered":{"@type":"Service","name":"AI Security Assessment â Ayliea","description":"The primary Ayliea engagement for a defined environment with a small number of related AI systems or workflows."}},{"@type":"Offer","price":"15000","priceCurrency":"USD","itemOffered":{"@type":"Service","name":"Comprehensive AI Security Assessment â Ayliea","description":"Broader assessment for multiple AI systems, larger evidence sets, vendors, or stakeholder groups."}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"Enterprise / Complex Scope â Ayliea","description":"Multiple entities, specialized procedures, recurring assessments, or complex technical environments."}}]},"sameAs":["https://linkedin.com/company/ayliea","https://www.youtube.com/@Ayliea-2023"]}</script>
10<a class="skip-link" href="#main-content">Skip to content</a><div class="header-shell"><header class="site-header"><a class="wordmark" aria-label="Ayliea home" href="/"><img class="brand-icon" src="/icon.png" alt="" width="48" height="48"/></a><nav class="desktop-nav" aria-label="Primary navigation"><div class="nav-dropdown"><button type="button" class="nav-dropdown-trigger" aria-expanded="false" aria-controls="nav-assessments">Assessments<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-chevron-down" aria-hidden="true"><path d="m6 9 6 6 6-6"></path></svg></button><div id="nav-assessments" class="nav-dropdown-menu" hidden=""><a href="/services">Overview</a><a href="/methodology">Methodology</a><a href="/sample-report">Sample report</a><a href="/pricing">Engagement pricing</a></div></div><div class="nav-dropdown"><button type="button" class="nav-dropdown-trigger" aria-expanded="false" aria-controls="nav-industries">Industries<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-chevron-down" aria-hidden="true"><path d="m6 9 6 6 6-6"></path></svg></button><div id="nav-industries" class="nav-dropdown-menu" hidden=""><a href="/industries">All industries</a><a href="/industries/healthcare">Healthcare</a><a href="/industries/financial-services">Financial services</a><a href="/industries/legal">Legal</a><a href="/industries/education">Education</a><a href="/industries/technology">Technology</a></div></div><div class="nav-dropdown"><button type="button" class="nav-dropdown-trigger" aria-expanded="false" aria-controls="nav-resources">Resources<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-chevron-down" aria-hidden="true"><path d="m6 9 6 6 6-6"></path></svg></button><div id="nav-resources" class="nav-dropdown-menu" hidden=""><a href="/blog">Insights</a><a href="/security-awareness">Templates and guides</a><a href="/resources/ai-use-policy">AI use policy template</a><a href="/discover">Shadow AI discovery</a><a href="/tools/ai-risk-score">AI readiness calculator</a><a href="/tools/vendor-lookup">AI vendor lookup</a></div></div><div class="nav-dropdown"><button type="button" class="nav-dropdown-trigger" aria-expanded="false" aria-controls="nav-about">About<svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-chevron-down" aria-hidden="true"><path d="m6 9 6 6 6-6"></path></svg></button><div id="nav-about" class="nav-dropdown-menu" hidden=""><a href="/about">About Ayliea</a><a href="/oklahoma-city-cybersecurity-consulting">OKC cybersecurity consulting</a><a href="/trust">Trust and security</a><a href="/faq">FAQ</a><a href="/contact">Contact</a></div></div></nav><a class="header-cta" href="/contact#booking">Request a scoping call</a><button class="mobile-menu-toggle" type="button" aria-expanded="false" aria-controls="mobile-navigation">Menu</button></header><nav id="mobile-navigation" class="mobile-navigation" aria-label="Mobile navigation" hidden=""><div><span>Assessments</span><a href="/services">Overview</a><a href="/methodology">Methodology</a><a href="/sample-report">Sample report</a><a href="/pricing">Engagement pricing</a></div><div><span>Industries</span><a href="/industries">All industries</a><a href="/industries/healthcare">Healthcare</a><a href="/industries/financial-services">Financial services</a><a href="/industries/legal">Legal</a><a href="/industries/education">Education</a><a href="/industries/technology">Technology</a></div><div><span>Resources</span><a href="/blog">Insights</a><a href="/security-awareness">Templates and guides</a><a href="/resources/ai-use-policy">AI use policy template</a><a href="/discover">Shadow AI discovery</a><a href="/tools/ai-risk-score">AI readiness calculator</a><a href="/tools/vendor-lookup">AI vendor lookup</a></div><div><span>About</span><a href="/about">About Ayliea</a><a href="/oklahoma-city-cybersecurity-consulting">OKC cybersecurity consulting</a><a href="/trust">Trust and security</a><a href="/faq">FAQ</a><a href="/contact">Contact</a></div><a class="header-cta" href="/contact#booking">
10Request a scoping call</a></nav></div><main id="main-content"><section class="hero"><div class="hero-copy"><p class="eyebrow">Independent AI security & governance</p><h1>Understand your AI risk. Know what to fix.</h1><p class="hero-lede">Independent assessments of AI systems, agents, vendors and sensitive-data flows. Get evidence-backed findings and clear remediation priorities.</p><div class="hero-actions"><a class="button button-primary" href="/contact#booking">Request a scoping call</a><a class="text-link" href="/sample-report">View sample report</a></div></div><aside class="dossier dossier-finding" aria-label="Illustrative AI security finding"><div class="dossier-spine" aria-hidden="true"></div><div class="dossier-topline"><span>AYLIEA / SAMPLE-001</span><span>ILLUSTRATIVE SAMPLE</span></div><div class="dossier-rule"></div><p class="dossier-kicker">Independent assessment</p><h2>AI Security<br/>Evidence Dossier</h2><div class="finding-rows"><div><span class="evidence-icon"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-triangle-alert" aria-hidden="true"><path d="m21.73 18-8-14a2 2 0 0 0-3.48 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3"></path><path d="M12 9v4"></path><path d="M12 17h.01"></path></svg></span><div><h3>Finding</h3><p>Provider retention settings lack current configuration evidence.</p></div></div><div><span class="evidence-icon"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-text" aria-hidden="true"><path d="M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z"></path><path d="M14 2v5a1 1 0 0 0 1 1h5"></path><path d="M10 9H8"></path><path d="M16 13H8"></path><path d="M16 17H8"></path></svg></span><div><h3>Evidence reviewed</h3><p>AI inventory, data-flow records and stakeholder statements.</p></div></div><div><span class="evidence-icon"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-wrench" aria-hidden="true"><path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.106-3.105c.32-.322.863-.22.983.218a6 6 0 0 1-8.259 7.057l-7.91 7.91a1 1 0 0 1-2.999-3l7.91-7.91a6 6 0 0 1 7.057-8.259c.438.12.54.662.219.984z"></path></svg></span><div><h3>Remediation priority</h3><p>Obtain configuration or contractual evidence, then re-evaluate.</p></div></div></div><a class="text-link" href="/sample-report">See a sample finding</a></aside></section><section class="evidence-to-action" aria-labelledby="evidence-heading"><h2 id="evidence-heading">From evidence to action</h2><div class="evidence-steps"><article><span class="evidence-icon"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-network" aria-hidden="true"><rect x="16" y="16" width="6" height="6" rx="1"></rect><rect x="2" y="16" width="6" height="6" rx="1"></rect><rect x="9" y="2" width="6" height="6" rx="1"></rect><path d="M5 16v-3a1 1 0 0 1 1-1h12a1 1 0 0 1 1 1v3"></path><path d="M12 12V8"></path></svg></span><div><h3>Map the system</h3><p>Evaluate AI systems, agents, vendors and data flows in context.</p></div></article><article><span class="evidence-icon"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-file-text" aria-hidden="true"><path d="M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z"></path><path d="M14 2v5a1 1 0 0 0 1 1h5"></path><path d="M10 9H8"></path><path d="M16 13H8"></path><path d="M16 17H8"></path></svg></span><div><h3>Review the evidence</h3><p>Assess evidence against relevant frameworks and requirements.</p></div></article><article><span class="evidence-icon"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-settings" aria-hidden="true"><path d="M9.671 4.136a2.34 2.34 0 0 1 4.659 0 2.34 2.34 0 0 0 3.319 1.915 2.34 2.34 0 0 1 2.33 4.033 2.34 2.34 0 0 0 0 3.831 2.34 2.34 0 0 1-2.33 4.033 2.34 2.34 0 0 0-3.319 1.915 2.34 2.34 0 0 1-4.659 0 2.34 2.34 0 0 0-3.32-1.915 2.34 2.34 0 0 1-2.33-4.033 2.34 2.34 0 0 0 0-3.831A2.34 2.34 0 0 1 6.35 6.051a2.34 2.34 0 0 0 3.319-1.915"></path><circle cx="12" cy="12" r="3"></circle></svg></span><div><h3>Prioritize fixes</h3><p>Get clear findings and practical remediation priorities.</p></div></article></div></section><section class="trigger-paths section-pad"><div class="section-heading"><p class="eyebrow">01 / WHAT BROUGHT YOU HERE?</p><h2>Start with the problem you are trying to solve.</h2><p>You do not need to know which assessment package you need. Start with the review trigger, system, or risk that brought you here.</p></div><div class="trigger-path-grid"><a href="/services"><span>01</span><h3>A customer is asking about our AI</h3><p>Turn architecture, data flows, safeguards, vendor dependencies, and limitations into evidence a reviewer can follow.</p><strong>Explore customer diligence â</strong></a><a href="/services"><span>02</span><h3>We put sensitive data into AI</h3><p>Map where regulated or confidential information reaches AI services and determine what controls and evidence actually cover it.</p><strong>Explore data-risk review â</strong></a><a href="/industries/technology/ai-agent-security-assessment"><span>03</span><h3>We are deploying AI agents</h3><p>Assess agent identity, authority, prompt-injection exposure, tools, data access, external actions, and containment.</p><strong>Explore agent security â</strong></a><a href="/industries"><span>04</span><h3>We need to assess an AI vendor</h3><p>Review the provider, data boundary, access model, evidence, contractual assumptions, and security dependencies around the use case.</p><strong>Choose your industry â</strong></a><a href="/security-awareness/ai-data-safety"><span>05</span><h3>We do not know how teams are using AI</h3><p>Start with practical AI data-safety guidance, then inventory approved and unmanaged use before deciding whether formal assessment is needed.</p><strong>Start with the free guide â</strong></a></div></section><section class="recognition section-pad"><div class="recognition-lead"><p class="section-number">02 / THE REVIEW TRIGGER</p><h2>Someone important asking hard questions about your AI?</h2><p>A SOC 2 report, policy set, or completed questionnaire may not answer the AI-s
10pecific questions now appearing in customer diligence, procurement, compliance, and security review.</p></div><div class="issue-list"><article><span>01</span><div><h3>AI systems</h3><p>You may not have one defensible inventory of every AI product, model, provider, integration, and workflow.</p></div></article><article><span>02</span><div><h3>Sensitive-data flows</h3><p>Reviewers need to understand what information reaches which AI providersâand under what controls.</p></div></article><article><span>03</span><div><h3>Security evidence</h3><p>Existing artifacts may not explain the AI-specific controls, decisions, and residual risks the reviewer is asking about.</p></div></article></div></section><section class="deliverable-section section-pad-dark"><div class="deliverable-copy"><p class="section-number light-number">03 / THE DELIVERABLE</p><div class="section-heading inverse"><p class="eyebrow">Reviewer-ready evidence</p><h2>Give the reviewer something they can actually review.</h2><p>The assessment turns a dispersed set of systems, data flows, controls, and evidence into a coherent, signed record. Deliverables are tailored to engagement scopeânot represented as universal industry requirements.</p></div><a class="button button-outline-light" href="/sample-report">See a sample assessment</a></div><div class="report-artifact"><div class="report-page report-page-back" aria-hidden="true"></div><div class="report-page"><div class="report-head"><span>AYLIEA / SAMPLE-001</span><strong>ILLUSTRATIVE CONTENTS</strong></div><p class="report-title">AI security evidence package</p><div class="deliverable-list"><p><span>01</span>Executive summary<i aria-hidden="true">â</i></p><p><span>02</span>AI system inventory<i aria-hidden="true">â</i></p><p><span>03</span>Data-flow documentation<i aria-hidden="true">â</i></p><p><span>04</span>Security findings<i aria-hidden="true">â</i></p><p><span>05</span>Risk prioritization<i aria-hidden="true">â</i></p><p><span>06</span>Industry-relevant mapping<i aria-hidden="true">â</i></p><p><span>07</span>NIST AI RMF mapping<i aria-hidden="true">â</i></p><p><span>08</span>Remediation recommendations<i aria-hidden="true">â</i></p><p><span>09</span>Evidence references<i aria-hidden="true">â</i></p><p><span>10</span>Assessor sign-off<i aria-hidden="true">â</i></p></div><div class="report-note"><span>ASSESSOR NOTE</span><p>Findings, limitations, and evidence references are documented within the agreed scope.</p></div></div></div></section><section class="assessment-basis section-pad"><div class="section-heading"><p class="eyebrow">Assessment basis</p><h2>The report shows how each conclusion was formed.</h2><p>Evidence is labeled by source and review method so a receiving reviewer can distinguish direct observation from supplied documents, stakeholder representations, and work that was not tested.</p></div><div><article><span>01</span><h3>Observed</h3><p>Directly inspected artifacts, settings, demonstrations, or workflows.</p></article><article><span>02</span><h3>Supplied</h3><p>Documentation provided by the client or another in-scope source.</p></article><article><span>03</span><h3>Represented</h3><p>A stakeholder statement that was not independently established.</p></article><article><span>04</span><h3>Not tested</h3><p>A procedure or condition the written scope did not independently validate.</p></article></div></section><section class="process section-pad"><div class="section-heading"><p class="eyebrow">04 / Engagement</p><h2>A clear path from scope to signed assessment.</h2><p>The engagement follows a documented path from scope and evidence review through findings, human review, and final delivery.</p></div><ol class="process-line"><li><span>1</span><h3>Scope</h3><p>20-minute call to determine systems, entities, data flows, evidence, and review requirements.</p></li><li><span>2</span><h3>Assess</h3><p>Ayliea reviews the scoped environment and the evidence provided.</p></li><li><span>3</span><h3>Document</h3><p>Findings, mappings, limitations, and remediation recommendations are documented.</p></li><li><span>4</span><h3>Review</h3><p>
10Material findings and conclusions receive accountable human review before delivery.</p></li><li><span>5</span><h3>Use</h3><p>You may provide the assessment during relevant customer, partner, compliance, or security diligence.</p></li></ol><p class="fine-print">The receiving organization determines what evidence it requires and whether the assessment is sufficient for its review.</p></section><section class="audiences section-pad"><div class="audience-primary"><p class="section-number">05 / WHO IT IS FOR</p><p class="eyebrow">Primary engagement</p><h2>Organizations operating AI in high-trust environments</h2><p>Building, buying, or operating AI where sensitive data, regulated workflows, customer trust, or third-party review make unsupported answers expensive.</p><ul class="inline-tags" aria-label="Industries Ayliea serves"><li>Healthcare</li><li>Financial services</li><li>Legal</li><li>Education</li><li>Technology</li></ul><a class="text-link" href="/industries">Explore industries <span aria-hidden="true">â</span></a></div><div class="audience-secondary"><article><span>INDUSTRY CONTEXT</span><h3>Different environments create different evidence needs.</h3><p>Healthcare, financial services, legal, education, and technology teams face different data boundaries, review triggers, and regulatory expectations.</p><a href="/industries">Explore industry pages â</a></article><article><span>REVIEW & INFLUENCE</span><h3>Security, vendor-risk, privacy & compliance teams</h3><p>Clear evidence presentation for professionals evaluating AI use and related safeguards.</p></article></div></section><section class="independent section-pad"><div class="section-heading"><p class="eyebrow">06 / Independent review</p><h2>Organization is useful. Judgment is different.</h2><p>Compliance software can help organize controls, evidence, and workflows. An independent assessment applies contextual professional review to that material.</p></div><div class="assessment-comparison" role="table" aria-label="Ways to evaluate AI security"><div class="comparison-row comparison-head" role="row"><span role="columnheader">Capability</span><strong role="columnheader">Self-assessment</strong><strong role="columnheader">GRC platform</strong><strong role="columnheader">Ayliea assessment</strong></div><div class="comparison-row" role="row"><span role="rowheader">Inventory & structure</span><p role="cell">Yes</p><p role="cell">Yes</p><p role="cell">Yes</p></div><div class="comparison-row" role="row"><span role="rowheader">Evidence examined in context</span><p role="cell">Internal</p><p role="cell">Collected</p><p role="cell">Evaluated</p></div><div class="comparison-row" role="row"><span role="rowheader">AI-specific security analysis</span><p role="cell">Varies</p><p role="cell">Varies</p><p role="cell">Core scope</p></div><div class="comparison-row" role="row"><span role="rowheader">Professional judgment</span><p role="cell">Internal</p><p role="cell">No</p><p role="cell">Human review</p></div><div class="comparison-row" role="row"><span role="rowheader">Explicit findings & limitations</span><p role="cell">Varies</p><p role="cell">Workflow-driven</p><p role="cell">Documented</p></div><div class="comparison-row" role="row"><span role="rowheader">Remediation priorities</span><p role="cell">Internal</p><p role="cell">Workflow-driven</p><p role="cell">Evidence-backed</p></div></div></section><section class="method-section section-pad"><div class="method-copy"><p class="section-number">07 / METHODOLOGY</p><h2>Transparent methodology.<br/>Human judgment.</h2><p>The assessment is evidence-led and maps relevant findings to established AI security and governance frameworksâsuch as NIST AI RMF and ISO/IEC 42001âplus applicable industry requirements when they belong in scope, rather than to a proprietary standard. Evidence-quality decisions and professional judgments remain documented, attributable, and subject to accountable human review.</p><a class="button button-secondary" href="/methodology">Explore the methodology</a></div><div class="framework-flow" aria-label="Assessment methodology flow"><div><span>01</span><strong>Control domain</strong></div><div><span>02</span><strong>Evidence</strong></div><div><span>03</span><strong>Finding</strong></div><div><span>04</span><strong>Severity</strong></div><div><span>05</span><strong>Framework mapping</strong></div><div><span>06</span><strong>Signed conclusion</strong></div></div></section><section class="accountability-strip section-pad-dark"><div><p class="section-number light-number">08 / ACCOUNTABLE REVIEW</p><h2>Independent does not mean anonymous.</h2></div><div><p>
10Material findings and conclusions receive human review. The report identifies its evidence basis, limitations, scope, and sign-off so a customer can understand what was established and what was not.</p><a class="text-link light-link" href="/about">About Ayliea and its assessment practice â</a></div></section><section class="sample-cta section-pad"><div class="sample-sheet" aria-hidden="true"><span>SAMPLE</span><strong>Finding 04</strong><p>Third-party AI provider data retention requires further evidence.</p><i>MODERATE</i></div><div><p class="section-number">09 / BEFORE YOU BOOK</p><h2>See exactly what an assessment looks like.</h2><p>Review the structure, evidence presentation, findings, framework mappings, limitations, and assessor sign-off before booking a call.</p><a class="button button-primary" href="/sample-report">See a sample report</a></div></section><section class="pricing-preview section-pad"><div class="section-heading"><p class="eyebrow">10 / Engagement levels</p><h2>Clear starting points. Scope still matters.</h2><p>Final pricing depends on the number of AI systems, entities, evidence requirements, frameworks, and overall engagement complexity.</p></div><div class="pricing-rows"><a href="/pricing"><span>AI Security Review</span><strong>From $3,500</strong><i>For one defined AI system or workflow â</i></a><a href="/pricing"><span>AI Security Assessment</span><strong>From $7,500</strong><i>Our primary evidence-backed engagement â</i></a><a href="/pricing"><span>Comprehensive Assessment</span><strong>From $15,000</strong><i>For broader environments and evidence needs â</i></a><a href="/pricing"><span>Enterprise / Complex Scope</span><strong>Custom</strong><i>For multiple entities, specialized procedures, or recurring needs â</i></a></div><a class="text-link" href="/contact#booking">Discuss your scope <span aria-hidden="true">â</span></a></section><section class="home-resources section-pad-dark"><div class="section-heading inverse"><p class="eyebrow">11 / Free resources</p><h2>Not ready for an assessment? Start with something useful.</h2><p>Use Aylieaâs practical resources to improve AI and cybersecurity decisions now. No assessment purchase required.</p></div><div class="home-resource-grid"><a href="/security-awareness/ai-data-safety"><span>AI DATA SAFETY</span><h3>Before You Paste It Into AI</h3><p>A 60-second decision guide for employees handling company information around AI tools.</p><strong>Open the guide â</strong></a><a href="/resources/ai-use-policy"><span>AI GOVERNANCE</span><h3>AI Use Policy Template</h3><p>A practical starting point for defining approved tools, restricted data, responsibilities, and acceptable use.</p><strong>Use the template â</strong></a><a href="/security-awareness/small-business-checklist"><span>CYBERSECURITY</span><h3>Small Business Security Checklist</h3><p>Twelve foundational controls to review, prioritize, and assign before gaps become incidents.</p><strong>Open the checklist â</strong></a><a href="/security-awareness"><span>RESOURCE HUB</span><h3>Cybersecurity Awareness Toolkit</h3><p>A complete four-week campaign with employee guidance, manager actions, and print-ready resources.</p><strong>Explore all resources â</strong></a></div></section><section class="faq-section section-pad"><div class="section-heading"><p class="eyebrow">12 / Buyer questions</p><h2>Before the assessment begins.</h2></div><div class="faq-list"><details open=""><summary><span>01</span>What do we receive from an assessment?<i aria-hidden="true">+</i></summary><p>The engagement can produce a signed assessment with an executive summary, scoped AI inventory, data-flow documentation, evidence-backed findings, risk prioritization, framework references, limitations, and remediation recommendations. Exact contents depend on the agreed scope.</p></details><details><summary><span>02</span>Can we use the assessment during a customer, regulator, or partner security review?<i aria-hidden="true">+</i></summary><p>You may provide the assessment as evidence during relevant security, vendor-risk, procurement, regulatory, or partner diligence. Each reviewer decides what evidence it requires, who may rely on the report, and whether the assessment is sufficient.</p></details>
10<details><summary><span>03</span>What procedures can be included?<i aria-hidden="true">+</i></summary><p>A scope may include document review, stakeholder interviews, configuration inspection, observation, demonstrations, and sampling. The written scope states which procedures were performed and which were not.</p></details><details><summary><span>04</span>Does the assessment include technical testing?<i aria-hidden="true">+</i></summary><p>Not automatically. Penetration testing, source-code review, model-performance evaluation, AI red-teaming, and continuous monitoring are excluded unless separately scoped and documented.</p></details><details><summary><span>05</span>How is missing or conflicting evidence handled?<i aria-hidden="true">+</i></summary><p>The report identifies unavailable, stale, conflicting, client-represented, and not-tested evidence. Conclusions are qualified when evidence quality or coverage limits confidence.</p></details><details><summary><span>06</span>How current is the assessment?<i aria-hidden="true">+</i></summary><p>The report is point-in-time. It states its assessment date or period, evidence cutoff, scope, and change-after-assessment boundary. Material changes may require an update or new assessment.</p></details><details><summary><span>07</span>Can Ayliea receive sensitive or regulated data?<i aria-hidden="true">+</i></summary><p>Do not send regulated records, personal data, credentials, questionnaires, or assessment evidence through the booking page or initial email. Ayliea avoids receiving unnecessary sensitive data, including PHI, and establishes engagement-specific transfer arrangements in writing.</p></details><details><summary><span>08</span>What does independent mean?<i aria-hidden="true">+</i></summary><p>Ayliea is an external, paid assessor rather than the organization being assessed or its regulator. Independence does not imply governmental authority. Potential conflicts are addressed during scoping, and commercial outcomes are not guaranteed.</p></details><details><summary><span>09</span>How are corrections handled?<i aria-hidden="true">+</i></summary><p>Factual errors and evidence references can be corrected through a documented review process. A request to change a commercial outcome does not require the assessor to change a supported professional conclusion.</p></details><details><summary><span>10</span>How long does an engagement take?<i aria-hidden="true">+</i></summary><p>Timing depends on the agreed scope, system count, entities, procedures, evidence readiness, and stakeholder availability. The written scope sets the expected assessment period and delivery plan before work begins.</p></details><details><summary><span>11</span>How much does an engagement cost?<i aria-hidden="true">+</i></summary><p>AI Security Reviews start at $3,500; AI Security Assessments start at $7,500; Comprehensive AI Security Assessments start at $15,000; Enterprise / Complex Scope engagements are custom-scoped. Final pricing is confirmed in a written scope before work begins.</p></details><details><summary><span>12</span>Do you certify HIPAA compliance?<i aria-hidden="true">+</i></summary><p>No. Ayliea does not provide a government-backed HIPAA certification, certify that an organization is HIPAA compliant, or guarantee compliance. Relevant findings may be mapped to applicable HIPAA Security Rule safeguards.</p></details><details><summary><span>13</span>What security frameworks do you assess against?<i aria-hidden="true">+</i></summary><p>Ayliea maps and aligns relevant findings to established AI security frameworks: NIST AI RMF 1.0, ISO/IEC 42001:2023, HIPAA Security Rule, OWASP LLM Top 10, MITRE ATLAS. These references frame the findings so a receiving reviewer can place them in a familiar context. Mapping and alignment are not certification or endorsementâAyliea is not a certification bodyâand professional judgments and evidence-quality decisions remain explained and attributable to the assessor.</p></details></div></section><section class="final-cta"><div><p class="eyebrow">Next step</p><h2>Need a clearer record of your AI security risk?</h2><p>Use a 20-minute scoping call to clarify what the reviewer is asking for, what belongs in scope, and whether an independent Ayliea assessment is a fit.</p><ul class="scoping-outcomes" aria-label="Scoping call outcomes"><li>Clarify the review request</li><li>Identify systems and evidence</li><li>Define a defensible scope</li></ul></div><div class="final-actions"><a class="button button-light" href="/contact#booking">
10Request a scoping call</a><a class="text-link light-link" href="/sample-report">See a sample report <span aria-hidden="true">â</span></a></div></section></main><footer class="footer"><div class="footer-brand"><a class="wordmark" href="/">AYLIEA<span class="wordmark-dot">.</span></a><p>Independent AI security assessments for organizations deploying AI.</p><a href="mailto:[email protected]">[email protected]</a></div><div class="footer-links"><div><span>Industries</span><a href="/industries/healthcare">Healthcare</a><a href="/industries/financial-services">Financial services</a><a href="/industries/legal">Legal</a><a href="/industries/education">Education</a><a href="/industries/technology">Technology</a></div><div><span>Assessment</span><a href="/services">Services</a><a href="/oklahoma-city-cybersecurity-consulting">OKC cybersecurity consulting</a><a href="/sample-report">Sample report</a><a href="/pricing">Pricing</a></div><div><span>Resources</span><a href="/security-awareness">Security awareness</a><a href="/blog">Blog</a><a href="/resources/ai-use-policy">AI use policy template</a></div><div><span>Firm</span><a href="/about">About / assessor</a><a href="/methodology">Methodology</a><a href="/trust">Trust & security</a></div><div><span>Contact</span><a href="/contact#booking">Request a scoping call</a><a href="/contact">Contact</a><a href="/faq">FAQ</a></div><div><span>Legal</span><a href="/privacy">Privacy</a><a href="/cookies">Cookie policy</a><button type="button" class="self-start text-left text-xs text-[#c7d0d3] hover:text-white focus-visible:text-white transition-colors">Manage Cookies</button><a href="/legal/dpa">Data processing</a><a href="/accessibility">Accessibility</a><a href="/.well-known/security.txt">Security.txt</a></div></div><div class="footer-bottom"><span>© 2026 Ayliea LLC</span><span>Assessment evidence, clearly documented.</span></div></footer><!--$--><!--/$--><!--$!--><template data-dgst="BAILOUT_TO_CLIENT_SIDE_RENDERING"></template><!--/$--><!--$!--><template data-dgst="BAILOUT_TO_CLIENT_SIDE_RENDERING"></template><!--/$-->
10<script src="/_next/static/chunks/2zjueh7t2vecu.js" id="_R_" async=""></script>
10<script>(self.__next_f=self.__next_f||[]).push([0])</script>
10<script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\nb:I[68027,[\"/_next/static/chunks/144oed4p6xizz.js\"],\"default\",1]\n:HL[\"/_next/static/chunks/2f5cdtk75ohmm.css\",\"style\"]\n:HL[\"/_next/static/chunks/2d02wacbptube.css\",\"style\"]\n:HL[\"/_next/static/media/23b7a97ae3b5c134-s.p.226pwps5o-gq_.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/797e433ab948586e-s.p.0r6juujl39pe6.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/83afe278b6a6bb3c-s.p.2bn3s6zvc0dyp.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/99e609270109b47d-s.p.40sczeszzbjw1.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/caa3a2e1cccd8315-s.p.0wgildi0cnwt9.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/effe91970fc4db64-s.p.0oace-s_gkfks.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/fba5a26ea33df6a3-s.p.18rizl4rsrl42.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n2:T711,"])</script>
10<script>self.__next_f.push([1,"{\"@context\":\"https://schema.org\",\"@type\":\"Organization\",\"name\":\"Ayliea\",\"url\":\"https://ayliea.com\",\"logo\":\"https://ayliea.com/images/ayliea_logo.png\",\"description\":\"Independent AI security assessments for organizations deploying AI â a named CISSP assessor documents systems, evidence, findings, limitations, and remediation priorities in a signed report.\",\"founder\":{\"@type\":\"Person\",\"name\":\"Daviyon Daniels\"},\"contactPoint\":{\"@type\":\"ContactPoint\",\"email\":\"[email protected]\",\"contactType\":\"customer service\",\"availableLanguage\":\"English\"},\"address\":{\"@type\":\"PostalAddress\",\"addressLocality\":\"Oklahoma City\",\"addressRegion\":\"OK\",\"addressCountry\":\"US\"},\"hasOfferCatalog\":{\"@type\":\"OfferCatalog\",\"name\":\"AI Security Assessment Engagements\",\"itemListElement\":[{\"@type\":\"Offer\",\"price\":\"3500\",\"priceCurrency\":\"USD\",\"itemOffered\":{\"@type\":\"Service\",\"name\":\"AI Security Review â Ayliea\",\"description\":\"Focused independent review for one defined AI system, workflow, or use case.\"}},{\"@type\":\"Offer\",\"price\":\"7500\",\"priceCurrency\":\"USD\",\"itemOffered\":{\"@type\":\"Service\",\"name\":\"AI Security Assessment â Ayliea\",\"description\":\"The primary Ayliea engagement for a defined environment with a small number of related AI systems or workflows.\"}},{\"@type\":\"Offer\",\"price\":\"15000\",\"priceCurrency\":\"USD\",\"itemOffered\":{\"@type\":\"Service\",\"name\":\"Comprehensive AI Security Assessment â Ayliea\",\"description\":\"Broader assessment for multiple AI systems, larger evidence sets, vendors, or stakeholder groups.\"}},{\"@type\":\"Offer\",\"itemOffered\":{\"@type\":\"Service\",\"name\":\"Enterprise / Complex Scope â Ayliea\",\"description\":\"Multiple entities, specialized procedures, recurring assessments, or complex technical environments.\"}}]},\"sameAs\":[\"https://linkedin.com/company/ayliea\",\"https://www.youtube.com/@Ayliea-2023\"]}"])</script>
10<script>self.__next_f.push([1,"0:{\"P\":null,\"c\":[\"\",\"\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"(editorial)\",{\"children\":[\"__PAGE__\",{}]}]},\"$undefined\",\"$undefined\",16],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/2f5cdtk75ohmm.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/144oed4p6xizz.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"suppressHydrationWarning\":true,\"children\":[[\"$\",\"head\",null,{\"children\":[\"$\",\"script\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"\\n (function() {\\n try {\\n var theme = localStorage.getItem('theme');\\n if (theme === 'dark') {\\n document.documentElement.setAttribute('data-theme', 'dark');\\n }\\n } catch(e) {}\\n })();\\n \"}}]}],[\"$\",\"body\",null,{\"className\":\"inter_7b064e0d-module__MOT0tq__variable plus_jakarta_sans_218940a7-module__KK5t_a__variable ibm_plex_mono_78acdfb-module__83Xx8a__variable geist_deef94d5-module__Sms4YG__variable geist_mono_1bf8cbf6-module__FlyLvG__variable font-sans antialiased\",\"children\":[[\"$\",\"script\",null,{\"type\":\"application/ld+json\",\"dangerouslySetInnerHTML\":{\"__html\":\"{\\\"@context\\\":\\\"https://schema.org\\\",\\\"@type\\\":\\\"ProfessionalService\\\",\\\"name\\\":\\\"Ayliea\\\",\\\"description\\\":\\\"Independent AI security assessments for organizations deploying AI â a named CISSP assessor documents systems, evidence, findings, limitations, and remediation priorities in a signed report.\\\",\\\"url\\\":\\\"https://ayliea.com\\\",\\\"serviceType\\\":\\\"AI Security Assessment\\\",\\\"areaServed\\\":{\\\"@type\\\":\\\"Place\\\",\\\"name\\\":\\\"Worldwide\\\"},\\\"knowsAbout\\\":[\\\"AI Security\\\",\\\"Cybersecurity Assessment\\\",\\\"NIST AI RMF\\\",\\\"NIST CSF 2.0\\\",\\\"CIS Controls\\\",\\\"ISO 27001\\\",\\\"SOC 2\\\",\\\"HIPAA\\\",\\\"Shadow AI\\\"],\\\"founder\\\":{\\\"@type\\\":\\\"Person\\\",\\\"name\\\":\\\"Daviyon Daniels\\\"}}\"}}],[\"$\",\"script\",null,{\"type\":\"application/ld+json\",\"dangerouslySetInnerHTML\":{\"__html\":\"$2\"}}],\"$L3\",\"$L4\",\"$L5\",\"$L6\",\"$L7\"]}]]}]]}],{\"children\":[\"$L8\",{\"children\":[\"$L9\",{},null,false,null]},null,false,null]},null,false,null],\"$La\",false]],\"m\":\"$undefined\",\"G\":[\"$b\",[\"$Lc\"]],\"S\":true,\"h\":null,\"s\":\"$undefined\",\"l\":\"$undefined\",\"p\":\"$undefined\",\"d\":\"$undefined\",\"b\":\"nO4gGkZmymEeq9V8PnqAF\"}\n"])</script>
10<script>self.__next_f.push([1,"d:I[39756,[\"/_next/static/chunks/05-c3ty_6dwfk.js\",\"/_next/static/chunks/2omxb_s-c15_c.js\"],\"default\"]\ne:I[78214,[\"/_next/static/chunks/144oed4p6xizz.js\",\"/_next/static/chunks/2i97bpoltuqs4.js\"],\"default\"]\nf:I[37457,[\"/_next/static/chunks/05-c3ty_6dwfk.js\",\"/_next/static/chunks/2omxb_s-c15_c.js\"],\"default\"]\n10:I[98248,[\"/_next/static/chunks/144oed4p6xizz.js\"],\"CookieConsent\"]\n11:I[59053,[\"/_next/static/chunks/144oed4p6xizz.js\"],\"PostHogProvider\"]\n12:I[44757,[\"/_next/static/chunks/144oed4p6xizz.js\"],\"Analytics\"]\n13:I[57215,[\"/_next/static/chunks/144oed4p6xizz.js\"],\"SpeedInsights\"]\n14:I[39656,[\"/_next/static/chunks/144oed4p6xizz.js\",\"/_next/static/chunks/0nfn0e7p_sr7v.js\"],\"SiteHeader\"]\n15:I[22016,[\"/_next/static/chunks/144oed4p6xizz.js\",\"/_next/static/chunks/0nfn0e7p_sr7v.js\"],\"\"]\n2f:I[97367,[\"/_next/static/chunks/05-c3ty_6dwfk.js\",\"/_next/static/chunks/2omxb_s-c15_c.js\"],\"ViewportBoundary\"]\n31:I[97367,[\"/_next/static/chunks/05-c3ty_6dwfk.js\",\"/_next/static/chunks/2omxb_s-c15_c.js\"],\"MetadataBoundary\"]\n32:\"$Sreact.suspense\"\n"])</script>
10<script>self.__next_f.push([1,"3:[\"$\",\"$Ld\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$e\",\"errorStyles\":[],\"errorScripts\":[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/2i97bpoltuqs4.js\",\"async\":true}]],\"template\":[\"$\",\"$Lf\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[\"$\",\"div\",null,{\"className\":\"flex min-h-[60vh] flex-col items-center justify-center px-6 pt-24 pb-16 text-center\",\"children\":[[\"$\",\"p\",null,{\"className\":\"text-8xl font-extrabold text-gradient font-[family-name:var(--font-heading)]\",\"children\":\"404\"}],[\"$\",\"h1\",null,{\"className\":\"mt-4 text-2xl font-bold text-[var(--color-text-heading)] font-[family-name:var(--font-heading)]\",\"children\":\"Page Not Found\"}],[\"$\",\"p\",null,{\"className\":\"mt-2 max-w-md text-[var(--color-text-muted)]\",\"children\":\"The page you're looking for doesn't exist or has been moved.\"}],[\"$\",\"div\",null,{\"className\":\"mt-8 flex gap-4\",\"children\":[[\"$\",\"a\",null,{\"className\":\"bg-gradient-brand text-white rounded-lg font-semibold hover:opacity-90 hover:scale-[1.02] transition-all duration-200 shadow-lg px-8 py-4 text-lg inline-flex items-center justify-center disabled:opacity-50 disabled:cursor-not-allowed disabled:hover:scale-100\",\"href\":\"/\",\"children\":\"Back to Home\"}],[\"$\",\"a\",null,{\"className\":\"border-2 border-[var(--color-accent-blue)] text-[var(--color-accent-blue)] rounded-lg font-semibold hover:bg-[var(--color-accent-blue)] hover:text-white transition-colors px-8 py-4 text-lg inline-flex items-center justify-center disabled:opacity-50 disabled:cursor-not-allowed disabled:hover:scale-100\",\"href\":\"/contact\",\"children\":\"Contact Us\"}]]}]]}],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]\n"])</script>
10<script>self.__next_f.push([1,"4:[\"$\",\"$L10\",null,{}]\n5:[\"$\",\"$L11\",null,{}]\n6:[\"$\",\"$L12\",null,{}]\n7:[\"$\",\"$L13\",null,{}]\n"])</script>
10<script>self.__next_f.push([1,"8:[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/2d02wacbptube.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]],[\"$\",\"$Ld\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$Lf\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[\"$\",\"div\",null,{\"className\":\"flex min-h-[60vh] flex-col items-center justify-center px-6 pt-24 pb-16 text-center\",\"children\":[[\"$\",\"p\",null,{\"className\":\"text-8xl font-extrabold text-gradient font-[family-name:var(--font-heading)]\",\"children\":\"404\"}],[\"$\",\"h1\",null,{\"className\":\"mt-4 text-2xl font-bold text-[var(--color-text-heading)] font-[family-name:var(--font-heading)]\",\"children\":\"Page Not Found\"}],[\"$\",\"p\",null,{\"className\":\"mt-2 max-w-md text-[var(--color-text-muted)]\",\"children\":\"The page you're looking for doesn't exist or has been moved.\"}],[\"$\",\"div\",null,{\"className\":\"mt-8 flex gap-4\",\"children\":[[\"$\",\"a\",null,{\"className\":\"bg-gradient-brand text-white rounded-lg font-semibold hover:opacity-90 hover:scale-[1.02] transition-all duration-200 shadow-lg px-8 py-4 text-lg inline-flex items-center justify-center disabled:opacity-50 disabled:cursor-not-allowed disabled:hover:scale-100\",\"href\":\"/\",\"children\":\"Back to Home\"}],[\"$\",\"a\",null,{\"className\":\"border-2 border-[var(--color-accent-blue)] text-[var(--color-accent-blue)] rounded-lg font-semibold hover:bg-[var(--color-accent-blue)] hover:text-white transition-colors px-8 py-4 text-lg inline-flex items-center justify-center disabled:opacity-50 disabled:cursor-not-allowed disabled:hover:scale-100\",\"href\":\"/contact\",\"children\":\"Contact Us\"}]]}]]}],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}]\n"])</script>
10<script>self.__next_f.push([1,"9:[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"a\",null,{\"className\":\"skip-link\",\"href\":\"#main-content\",\"children\":\"Skip to content\"}],[\"$\",\"$L14\",null,{\"dark\":false}],[\"$\",\"main\",null,{\"id\":\"main-content\",\"children\":[[\"$\",\"section\",null,{\"className\":\"hero\",\"children\":[[\"$\",\"div\",null,{\"className\":\"hero-copy\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"Independent AI security \u0026 governance\"}],[\"$\",\"h1\",null,{\"children\":\"Understand your AI risk. Know what to fix.\"}],[\"$\",\"p\",null,{\"className\":\"hero-lede\",\"children\":\"Independent assessments of AI systems, agents, vendors and sensitive-data flows. Get evidence-backed findings and clear remediation priorities.\"}],[\"$\",\"div\",null,{\"className\":\"hero-actions\",\"children\":[[\"$\",\"$L15\",null,{\"className\":\"button button-primary\",\"href\":\"/contact#booking\",\"children\":\"Request a scoping call\"}],[\"$\",\"$L15\",null,{\"className\":\"text-link\",\"href\":\"/sample-report\",\"children\":\"View sample report\"}]]}]]}],[\"$\",\"aside\",null,{\"className\":\"dossier dossier-finding\",\"aria-label\":\"Illustrative AI security finding\",\"children\":[[\"$\",\"div\",null,{\"className\":\"dossier-spine\",\"aria-hidden\":\"true\"}],[\"$\",\"div\",null,{\"className\":\"dossier-topline\",\"children\":[[\"$\",\"span\",null,{\"children\":\"AYLIEA / SAMPLE-001\"}],[\"$\",\"span\",null,{\"children\":\"ILLUSTRATIVE SAMPLE\"}]]}],[\"$\",\"div\",null,{\"className\":\"dossier-rule\"}],[\"$\",\"p\",null,{\"className\":\"dossier-kicker\",\"children\":\"Independent assessment\"}],[\"$\",\"h2\",null,{\"children\":[\"AI Security\",[\"$\",\"br\",null,{}],\"Evidence Dossier\"]}],[\"$\",\"div\",null,{\"className\":\"finding-rows\",\"children\":[[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"className\":\"evidence-icon\",\"children\":[\"$\",\"svg\",null,{\"ref\":\"$undefined\",\"xmlns\":\"http://www.w3.org/2000/svg\",\"width\":24,\"height\":24,\"viewBox\":\"0 0 24 24\",\"fill\":\"none\",\"stroke\":\"currentColor\",\"strokeWidth\":2,\"strokeLinecap\":\"round\",\"strokeLinejoin\":\"round\",\"className\":\"lucide lucide-triangle-alert\",\"aria-hidden\":\"true\",\"children\":[[\"$\",\"path\",\"wmoenq\",{\"d\":\"m21.73 18-8-14a2 2 0 0 0-3.48 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3\"}],[\"$\",\"path\",\"juzpu7\",{\"d\":\"M12 9v4\"}],[\"$\",\"path\",\"p32p05\",{\"d\":\"M12 17h.01\"}],\"$undefined\"]}]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Finding\"}],[\"$\",\"p\",null,{\"children\":\"Provider retention settings lack current configuration evidence.\"}]]}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"className\":\"evidence-icon\",\"children\":[\"$\",\"svg\",null,{\"ref\":\"$undefined\",\"xmlns\":\"http://www.w3.org/2000/svg\",\"width\":24,\"height\":24,\"viewBox\":\"0 0 24 24\",\"fill\":\"none\",\"stroke\":\"currentColor\",\"strokeWidth\":2,\"strokeLinecap\":\"round\",\"strokeLinejoin\":\"round\",\"className\":\"lucide lucide-file-text\",\"aria-hidden\":\"true\",\"children\":[[\"$\",\"path\",\"1oefj6\",{\"d\":\"M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z\"}],[\"$\",\"path\",\"wfsgrz\",{\"d\":\"M14 2v5a1 1 0 0 0 1 1h5\"}],[\"$\",\"path\",\"b1mrlr\",{\"d\":\"M10 9H8\"}],[\"$\",\"path\",\"t4e002\",{\"d\":\"M16 13H8\"}],[\"$\",\"path\",\"z1uh3a\",{\"d\":\"M16 17H8\"}],\"$undefined\"]}]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Evidence reviewed\"}],[\"$\",\"p\",null,{\"children\":\"AI inventory, data-flow records and stakeholder statements.\"}]]}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"className\":\"evidence-icon\",\"children\":[\"$\",\"svg\",null,{\"ref\":\"$undefined\",\"xmlns\":\"http://www.w3.org/2000/svg\",\"width\":24,\"height\":24,\"viewBox\":\"0 0 24 24\",\"fill\":\"none\",\"stroke\":\"currentColor\",\"strokeWidth\":2,\"strokeLinecap\":\"round\",\"strokeLinejoin\":\"round\",\"className\":\"lucide lucide-wrench\",\"aria-hidden\":\"true\",\"children\":[[\"$\",\"path\",\"1ngwbx\",{\"d\":\"M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.106-3.105c.32-.322.863-.22.983.218a6 6 0 0 1-8.259 7.057l-7.91 7.91a1 1 0 0 1-2.999-3l7.91-7.91a6 6 0 0 1 7.057-8.259c.438.12.54.662.219.984z\"}],\"$undefined\"]}]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Remediation priority\"}],[\"$\",\"p\",null,{\"children\":\"Obtain configuration or contractual evidence, then re-evaluate.\"}]]}]]}]]}],[\"$\",\"$L15\",null,{\"className\":\"text-link\",\"href\":\"/sample-report\",\"children\":\"See a sample finding\"}]]}]]}],[\"$\",\"section\",null,{\"className\":\"evidence-to-action\",\"aria-labelledby\":\"evidence-heading\",\"children\":[[\"$\",\"h2\",null,{\"id\":\"evidence-heading\",\"children\":\"From evidence to action\"}],[\"$\",\"div\",null,{\"className\":\"evidence-steps\",\"children\":[[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"className\":\"evidence-icon\",\"children\":[\"$\",\"svg\",null,{\"ref\":\"$undefined\",\"xmlns\":\"http://www.w3.org/2000/svg\",\"width\":24,\"height\"
10:24,\"viewBox\":\"0 0 24 24\",\"fill\":\"none\",\"stroke\":\"currentColor\",\"strokeWidth\":2,\"strokeLinecap\":\"round\",\"strokeLinejoin\":\"round\",\"className\":\"lucide lucide-network\",\"aria-hidden\":\"true\",\"children\":[\"$L16\",\"$L17\",\"$L18\",\"$L19\",\"$L1a\",\"$undefined\"]}]}],\"$L1b\"]}],\"$L1c\",\"$L1d\"]}]]}],\"$L1e\",\"$L1f\",\"$L20\",\"$L21\",\"$L22\",\"$L23\",\"$L24\",\"$L25\",\"$L26\",\"$L27\",\"$L28\",\"$L29\",\"$L2a\",\"$L2b\"]}],\"$L2c\"],[\"$L2d\"],\"$L2e\"]}]\n"])</script>
10<script>self.__next_f.push([1,"a:[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L2f\",null,{\"children\":\"$L30\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L31\",null,{\"children\":[\"$\",\"$32\",null,{\"name\":\"Next.Metadata\",\"children\":\"$L33\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}]\nc:[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/chunks/2f5cdtk75ohmm.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]\n"])</script>
10<script>self.__next_f.push([1,"3b:I[493,[\"/_next/static/chunks/144oed4p6xizz.js\",\"/_next/static/chunks/0nfn0e7p_sr7v.js\"],\"ManageCookiesButton\"]\n3c:I[97367,[\"/_next/static/chunks/05-c3ty_6dwfk.js\",\"/_next/static/chunks/2omxb_s-c15_c.js\"],\"OutletBoundary\"]\n16:[\"$\",\"rect\",\"4q2zg0\",{\"x\":\"16\",\"y\":\"16\",\"width\":\"6\",\"height\":\"6\",\"rx\":\"1\"}]\n17:[\"$\",\"rect\",\"8cvhb9\",{\"x\":\"2\",\"y\":\"16\",\"width\":\"6\",\"height\":\"6\",\"rx\":\"1\"}]\n18:[\"$\",\"rect\",\"1egb70\",{\"x\":\"9\",\"y\":\"2\",\"width\":\"6\",\"height\":\"6\",\"rx\":\"1\"}]\n19:[\"$\",\"path\",\"1jsf9p\",{\"d\":\"M5 16v-3a1 1 0 0 1 1-1h12a1 1 0 0 1 1 1v3\"}]\n1a:[\"$\",\"path\",\"2874zd\",{\"d\":\"M12 12V8\"}]\n1b:[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Map the system\"}],[\"$\",\"p\",null,{\"children\":\"Evaluate AI systems, agents, vendors and data flows in context.\"}]]}]\n1c:[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"className\":\"evidence-icon\",\"children\":[\"$\",\"svg\",null,{\"ref\":\"$undefined\",\"xmlns\":\"http://www.w3.org/2000/svg\",\"width\":24,\"height\":24,\"viewBox\":\"0 0 24 24\",\"fill\":\"none\",\"stroke\":\"currentColor\",\"strokeWidth\":2,\"strokeLinecap\":\"round\",\"strokeLinejoin\":\"round\",\"className\":\"lucide lucide-file-text\",\"aria-hidden\":\"true\",\"children\":[[\"$\",\"path\",\"1oefj6\",{\"d\":\"M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z\"}],[\"$\",\"path\",\"wfsgrz\",{\"d\":\"M14 2v5a1 1 0 0 0 1 1h5\"}],[\"$\",\"path\",\"b1mrlr\",{\"d\":\"M10 9H8\"}],[\"$\",\"path\",\"t4e002\",{\"d\":\"M16 13H8\"}],[\"$\",\"path\",\"z1uh3a\",{\"d\":\"M16 17H8\"}],\"$undefined\"]}]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Review the evidence\"}],[\"$\",\"p\",null,{\"children\":\"Assess evidence against relevant frameworks and requirements.\"}]]}]]}]\n1d:[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"className\":\"evidence-icon\",\"children\":[\"$\",\"svg\",null,{\"ref\":\"$undefined\",\"xmlns\":\"http://www.w3.org/2000/svg\",\"width\":24,\"height\":24,\"viewBox\":\"0 0 24 24\",\"fill\":\"none\",\"stroke\":\"currentColor\",\"strokeWidth\":2,\"strokeLinecap\":\"round\",\"strokeLinejoin\":\"round\",\"className\":\"lucide lucide-settings\",\"aria-hidden\":\"true\",\"children\":[[\"$\",\"path\",\"1i5ecw\",{\"d\":\"M9.671 4.136a2.34 2.34 0 0 1 4.659 0 2.34 2.34 0 0 0 3.319 1.915 2.34 2.34 0 0 1 2.33 4.033 2.34 2.34 0 0 0 0 3.831 2.34 2.34 0 0 1-2.33 4.033 2.34 2.34 0 0 0-3.319 1.915 2.34 2.34 0 0 1-4.659 0 2.34 2.34 0 0 0-3.32-1.915 2.34 2.34 0 0 1-2.33-4.033 2.34 2.34 0 0 0 0-3.831A2.34 2.34 0 0 1 6.35 6.051a2.34 2.34 0 0 0 3.319-1.915\"}],[\"$\",\"circle\",\"1v7zrd\",{\"cx\":\"12\",\"cy\":\"12\",\"r\":\"3\"}],\"$undefined\"]}]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Prioritize fixes\"}],[\"$\",\"p\",null,{\"children\":\"Get clear findings and practical remediation priorities.\"}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"1e:[\"$\",\"section\",null,{\"className\":\"trigger-paths section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"section-heading\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"01 / WHAT BROUGHT YOU HERE?\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"Start with the problem you are trying to solve.\"}],[\"$\",\"p\",null,{\"children\":\"You do not need to know which assessment package you need. Start with the review trigger, system, or risk that brought you here.\"}]]}],[\"$\",\"div\",null,{\"className\":\"trigger-path-grid\",\"children\":[[\"$\",\"$L15\",null,{\"href\":\"/services\",\"children\":[[\"$\",\"span\",null,{\"children\":\"01\"}],[\"$\",\"h3\",null,{\"children\":\"A customer is asking about our AI\"}],[\"$\",\"p\",null,{\"children\":\"Turn architecture, data flows, safeguards, vendor dependencies, and limitations into evidence a reviewer can follow.\"}],[\"$\",\"strong\",null,{\"children\":\"Explore customer diligence â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/services\",\"children\":[[\"$\",\"span\",null,{\"children\":\"02\"}],[\"$\",\"h3\",null,{\"children\":\"We put sensitive data into AI\"}],[\"$\",\"p\",null,{\"children\":\"Map where regulated or confidential information reaches AI services and determine what controls and evidence actually cover it.\"}],[\"$\",\"strong\",null,{\"children\":\"Explore data-risk review â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/industries/technology/ai-agent-security-assessment\",\"children\":[[\"$\",\"span\",null,{\"children\":\"03\"}],[\"$\",\"h3\",null,{\"children\":\"We are deploying AI agents\"}],[\"$\",\"p\",null,{\"children\":\"Assess agent identity, authority, prompt-injection exposure, tools, data access, external actions, and containment.\"}],[\"$\",\"strong\",null,{\"children\":\"Explore agent security â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/industries\",\"children\":[[\"$\",\"span\",null,{\"children\":\"04\"}],[\"$\",\"h3\",null,{\"children\":\"We need to assess an AI vendor\"}],[\"$\",\"p\",null,{\"children\":\"Review the provider, data boundary, access model, evidence, contractual assumptions, and security dependencies around the use case.\"}],[\"$\",\"strong\",null,{\"children\":\"Choose your industry â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/security-awareness/ai-data-safety\",\"children\":[[\"$\",\"span\",null,{\"children\":\"05\"}],[\"$\",\"h3\",null,{\"children\":\"We do not know how teams are using AI\"}],[\"$\",\"p\",null,{\"children\":\"Start with practical AI data-safety guidance, then inventory approved and unmanaged use before deciding whether formal assessment is needed.\"}],[\"$\",\"strong\",null,{\"children\":\"Start with the free guide â\"}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"1f:[\"$\",\"section\",null,{\"className\":\"recognition section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"recognition-lead\",\"children\":[[\"$\",\"p\",null,{\"className\":\"section-number\",\"children\":\"02 / THE REVIEW TRIGGER\"}],[\"$\",\"h2\",null,{\"children\":\"Someone important asking hard questions about your AI?\"}],[\"$\",\"p\",null,{\"children\":\"A SOC 2 report, policy set, or completed questionnaire may not answer the AI-specific questions now appearing in customer diligence, procurement, compliance, and security review.\"}]]}],[\"$\",\"div\",null,{\"className\":\"issue-list\",\"children\":[[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"01\"}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"AI systems\"}],[\"$\",\"p\",null,{\"children\":\"You may not have one defensible inventory of every AI product, model, provider, integration, and workflow.\"}]]}]]}],[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"02\"}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Sensitive-data flows\"}],[\"$\",\"p\",null,{\"children\":\"Reviewers need to understand what information reaches which AI providersâand under what controls.\"}]]}]]}],[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"03\"}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"h3\",null,{\"children\":\"Security evidence\"}],[\"$\",\"p\",null,{\"children\":\"Existing artifacts may not explain the AI-specific controls, decisions, and residual risks the reviewer is asking about.\"}]]}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"20:[\"$\",\"section\",null,{\"className\":\"deliverable-section section-pad-dark\",\"children\":[[\"$\",\"div\",null,{\"className\":\"deliverable-copy\",\"children\":[[\"$\",\"p\",null,{\"className\":\"section-number light-number\",\"children\":\"03 / THE DELIVERABLE\"}],[\"$\",\"div\",null,{\"className\":\"section-heading inverse\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"Reviewer-ready evidence\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"Give the reviewer something they can actually review.\"}],[\"$\",\"p\",null,{\"children\":\"The assessment turns a dispersed set of systems, data flows, controls, and evidence into a coherent, signed record. Deliverables are tailored to engagement scopeânot represented as universal industry requirements.\"}]]}],[\"$\",\"$L15\",null,{\"className\":\"button button-outline-light\",\"href\":\"/sample-report\",\"children\":\"See a sample assessment\"}]]}],[\"$\",\"div\",null,{\"className\":\"report-artifact\",\"children\":[[\"$\",\"div\",null,{\"className\":\"report-page report-page-back\",\"aria-hidden\":\"true\"}],[\"$\",\"div\",null,{\"className\":\"report-page\",\"children\":[[\"$\",\"div\",null,{\"className\":\"report-head\",\"children\":[[\"$\",\"span\",null,{\"children\":\"AYLIEA / SAMPLE-001\"}],[\"$\",\"strong\",null,{\"children\":\"ILLUSTRATIVE CONTENTS\"}]]}],[\"$\",\"p\",null,{\"className\":\"report-title\",\"children\":\"AI security evidence package\"}],[\"$\",\"div\",null,{\"className\":\"deliverable-list\",\"children\":[[\"$\",\"p\",\"Executive summary\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"01\"}],\"Executive summary\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"AI system inventory\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"02\"}],\"AI system inventory\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"Data-flow documentation\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"03\"}],\"Data-flow documentation\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"Security findings\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"04\"}],\"Security findings\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"Risk prioritization\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"05\"}],\"Risk prioritization\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"Industry-relevant mapping\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"06\"}],\"Industry-relevant mapping\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"NIST AI RMF mapping\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"07\"}],\"NIST AI RMF mapping\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"Remediation recommendations\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"08\"}],\"Remediation recommendations\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"Evidence references\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"09\"}],\"Evidence references\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}],[\"$\",\"p\",\"Assessor sign-off\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"10\"}],\"Assessor sign-off\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}]]}],[\"$\",\"div\",null,{\"className\":\"report-note\",\"children\":[[\"$\",\"span\",null,{\"children\":\"ASSESSOR NOTE\"}],[\"$\",\"p\",null,{\"children\":\"Findings, limitations, and evidence references are documented within the agreed scope.\"}]]}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"21:[\"$\",\"section\",null,{\"className\":\"assessment-basis section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"section-heading\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"Assessment basis\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"The report shows how each conclusion was formed.\"}],[\"$\",\"p\",null,{\"children\":\"Evidence is labeled by source and review method so a receiving reviewer can distinguish direct observation from supplied documents, stakeholder representations, and work that was not tested.\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"01\"}],[\"$\",\"h3\",null,{\"children\":\"Observed\"}],[\"$\",\"p\",null,{\"children\":\"Directly inspected artifacts, settings, demonstrations, or workflows.\"}]]}],[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"02\"}],[\"$\",\"h3\",null,{\"children\":\"Supplied\"}],[\"$\",\"p\",null,{\"children\":\"Documentation provided by the client or another in-scope source.\"}]]}],[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"03\"}],[\"$\",\"h3\",null,{\"children\":\"Represented\"}],[\"$\",\"p\",null,{\"children\":\"A stakeholder statement that was not independently established.\"}]]}],[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"04\"}],[\"$\",\"h3\",null,{\"children\":\"Not tested\"}],[\"$\",\"p\",null,{\"children\":\"A procedure or condition the written scope did not independently validate.\"}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"22:[\"$\",\"section\",null,{\"className\":\"process section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"section-heading\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"04 / Engagement\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"A clear path from scope to signed assessment.\"}],[\"$\",\"p\",null,{\"children\":\"The engagement follows a documented path from scope and evidence review through findings, human review, and final delivery.\"}]]}],[\"$\",\"ol\",null,{\"className\":\"process-line\",\"children\":[[\"$\",\"li\",\"Scope\",{\"children\":[[\"$\",\"span\",null,{\"children\":1}],[\"$\",\"h3\",null,{\"children\":\"Scope\"}],[\"$\",\"p\",null,{\"children\":\"20-minute call to determine systems, entities, data flows, evidence, and review requirements.\"}]]}],[\"$\",\"li\",\"Assess\",{\"children\":[[\"$\",\"span\",null,{\"children\":2}],[\"$\",\"h3\",null,{\"children\":\"Assess\"}],[\"$\",\"p\",null,{\"children\":\"Ayliea reviews the scoped environment and the evidence provided.\"}]]}],[\"$\",\"li\",\"Document\",{\"children\":[[\"$\",\"span\",null,{\"children\":3}],[\"$\",\"h3\",null,{\"children\":\"Document\"}],[\"$\",\"p\",null,{\"children\":\"Findings, mappings, limitations, and remediation recommendations are documented.\"}]]}],[\"$\",\"li\",\"Review\",{\"children\":[[\"$\",\"span\",null,{\"children\":4}],[\"$\",\"h3\",null,{\"children\":\"Review\"}],[\"$\",\"p\",null,{\"children\":\"Material findings and conclusions receive accountable human review before delivery.\"}]]}],[\"$\",\"li\",\"Use\",{\"children\":[[\"$\",\"span\",null,{\"children\":5}],[\"$\",\"h3\",null,{\"children\":\"Use\"}],[\"$\",\"p\",null,{\"children\":\"You may provide the assessment during relevant customer, partner, compliance, or security diligence.\"}]]}]]}],[\"$\",\"p\",null,{\"className\":\"fine-print\",\"children\":\"The receiving organization determines what evidence it requires and whether the assessment is sufficient for its review.\"}]]}]\n"])</script>
10<script>self.__next_f.push([1,"23:[\"$\",\"section\",null,{\"className\":\"audiences section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"audience-primary\",\"children\":[[\"$\",\"p\",null,{\"className\":\"section-number\",\"children\":\"05 / WHO IT IS FOR\"}],[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"Primary engagement\"}],[\"$\",\"h2\",null,{\"children\":\"Organizations operating AI in high-trust environments\"}],[\"$\",\"p\",null,{\"children\":\"Building, buying, or operating AI where sensitive data, regulated workflows, customer trust, or third-party review make unsupported answers expensive.\"}],[\"$\",\"ul\",null,{\"className\":\"inline-tags\",\"aria-label\":\"Industries Ayliea serves\",\"children\":[[\"$\",\"li\",null,{\"children\":\"Healthcare\"}],[\"$\",\"li\",null,{\"children\":\"Financial services\"}],[\"$\",\"li\",null,{\"children\":\"Legal\"}],[\"$\",\"li\",null,{\"children\":\"Education\"}],[\"$\",\"li\",null,{\"children\":\"Technology\"}]]}],[\"$\",\"$L15\",null,{\"className\":\"text-link\",\"href\":\"/industries\",\"children\":[\"Explore industries \",[\"$\",\"span\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}]]}],[\"$\",\"div\",null,{\"className\":\"audience-secondary\",\"children\":[[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"INDUSTRY CONTEXT\"}],[\"$\",\"h3\",null,{\"children\":\"Different environments create different evidence needs.\"}],[\"$\",\"p\",null,{\"children\":\"Healthcare, financial services, legal, education, and technology teams face different data boundaries, review triggers, and regulatory expectations.\"}],[\"$\",\"$L15\",null,{\"href\":\"/industries\",\"children\":\"Explore industry pages â\"}]]}],[\"$\",\"article\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"REVIEW \u0026 INFLUENCE\"}],[\"$\",\"h3\",null,{\"children\":\"Security, vendor-risk, privacy \u0026 compliance teams\"}],[\"$\",\"p\",null,{\"children\":\"Clear evidence presentation for professionals evaluating AI use and related safeguards.\"}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"24:[\"$\",\"section\",null,{\"className\":\"independent section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"section-heading\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"06 / Independent review\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"Organization is useful. Judgment is different.\"}],[\"$\",\"p\",null,{\"children\":\"Compliance software can help organize controls, evidence, and workflows. An independent assessment applies contextual professional review to that material.\"}]]}],[\"$\",\"div\",null,{\"className\":\"assessment-comparison\",\"role\":\"table\",\"aria-label\":\"Ways to evaluate AI security\",\"children\":[[\"$\",\"div\",null,{\"className\":\"comparison-row comparison-head\",\"role\":\"row\",\"children\":[[\"$\",\"span\",null,{\"role\":\"columnheader\",\"children\":\"Capability\"}],[\"$\",\"strong\",null,{\"role\":\"columnheader\",\"children\":\"Self-assessment\"}],[\"$\",\"strong\",null,{\"role\":\"columnheader\",\"children\":\"GRC platform\"}],[\"$\",\"strong\",null,{\"role\":\"columnheader\",\"children\":\"Ayliea assessment\"}]]}],[[\"$\",\"div\",\"Inventory \u0026 structure\",{\"className\":\"comparison-row\",\"role\":\"row\",\"children\":[[\"$\",\"span\",\"Inventory \u0026 structure\",{\"role\":\"rowheader\",\"children\":\"Inventory \u0026 structure\"}],[\"$\",\"p\",\"Yes1\",{\"role\":\"cell\",\"children\":\"Yes\"}],[\"$\",\"p\",\"Yes2\",{\"role\":\"cell\",\"children\":\"Yes\"}],[\"$\",\"p\",\"Yes3\",{\"role\":\"cell\",\"children\":\"Yes\"}]]}],[\"$\",\"div\",\"Evidence examined in context\",{\"className\":\"comparison-row\",\"role\":\"row\",\"children\":[[\"$\",\"span\",\"Evidence examined in context\",{\"role\":\"rowheader\",\"children\":\"Evidence examined in context\"}],[\"$\",\"p\",\"Internal1\",{\"role\":\"cell\",\"children\":\"Internal\"}],[\"$\",\"p\",\"Collected2\",{\"role\":\"cell\",\"children\":\"Collected\"}],[\"$\",\"p\",\"Evaluated3\",{\"role\":\"cell\",\"children\":\"Evaluated\"}]]}],[\"$\",\"div\",\"AI-specific security analysis\",{\"className\":\"comparison-row\",\"role\":\"row\",\"children\":[[\"$\",\"span\",\"AI-specific security analysis\",{\"role\":\"rowheader\",\"children\":\"AI-specific security analysis\"}],[\"$\",\"p\",\"Varies1\",{\"role\":\"cell\",\"children\":\"Varies\"}],[\"$\",\"p\",\"Varies2\",{\"role\":\"cell\",\"children\":\"Varies\"}],[\"$\",\"p\",\"Core scope3\",{\"role\":\"cell\",\"children\":\"Core scope\"}]]}],[\"$\",\"div\",\"Professional judgment\",{\"className\":\"comparison-row\",\"role\":\"row\",\"children\":[[\"$\",\"span\",\"Professional judgment\",{\"role\":\"rowheader\",\"children\":\"Professional judgment\"}],[\"$\",\"p\",\"Internal1\",{\"role\":\"cell\",\"children\":\"Internal\"}],[\"$\",\"p\",\"No2\",{\"role\":\"cell\",\"children\":\"No\"}],[\"$\",\"p\",\"Human review3\",{\"role\":\"cell\",\"children\":\"Human review\"}]]}],[\"$\",\"div\",\"Explicit findings \u0026 limitations\",{\"className\":\"comparison-row\",\"role\":\"row\",\"children\":[[\"$\",\"span\",\"Explicit findings \u0026 limitations\",{\"role\":\"rowheader\",\"children\":\"Explicit findings \u0026 limitations\"}],[\"$\",\"p\",\"Varies1\",{\"role\":\"cell\",\"children\":\"Varies\"}],[\"$\",\"p\",\"Workflow-driven2\",{\"role\":\"cell\",\"children\":\"Workflow-driven\"}],[\"$\",\"p\",\"Documented3\",{\"role\":\"cell\",\"children\":\"Documented\"}]]}],[\"$\",\"div\",\"Remediation priorities\",{\"className\":\"comparison-row\",\"role\":\"row\",\"children\":[[\"$\",\"span\",\"Remediation priorities\",{\"role\":\"rowheader\",\"children\":\"Remediation priorities\"}],[\"$\",\"p\",\"Internal1\",{\"role\":\"cell\",\"children\":\"Internal\"}],[\"$\",\"p\",\"Workflow-driven2\",{\"role\":\"cell\",\"children\":\"Workflow-driven\"}],[\"$\",\"p\",\"Evidence-backed3\",{\"role\":\"cell\",\"children\":\"Evidence-backed\"}]]}]]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"25:[\"$\",\"section\",null,{\"className\":\"method-section section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"method-copy\",\"children\":[[\"$\",\"p\",null,{\"className\":\"section-number\",\"children\":\"07 / METHODOLOGY\"}],[\"$\",\"h2\",null,{\"children\":[\"Transparent methodology.\",[\"$\",\"br\",null,{}],\"Human judgment.\"]}],[\"$\",\"p\",null,{\"children\":\"The assessment is evidence-led and maps relevant findings to established AI security and governance frameworksâsuch as NIST AI RMF and ISO/IEC 42001âplus applicable industry requirements when they belong in scope, rather than to a proprietary standard. Evidence-quality decisions and professional judgments remain documented, attributable, and subject to accountable human review.\"}],[\"$\",\"$L15\",null,{\"className\":\"button button-secondary\",\"href\":\"/methodology\",\"children\":\"Explore the methodology\"}]]}],[\"$\",\"div\",null,{\"className\":\"framework-flow\",\"aria-label\":\"Assessment methodology flow\",\"children\":[[\"$\",\"div\",\"Control domain\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"01\"}],[\"$\",\"strong\",null,{\"children\":\"Control domain\"}]]}],[\"$\",\"div\",\"Evidence\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"02\"}],[\"$\",\"strong\",null,{\"children\":\"Evidence\"}]]}],[\"$\",\"div\",\"Finding\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"03\"}],[\"$\",\"strong\",null,{\"children\":\"Finding\"}]]}],[\"$\",\"div\",\"Severity\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"04\"}],[\"$\",\"strong\",null,{\"children\":\"Severity\"}]]}],[\"$\",\"div\",\"Framework mapping\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"05\"}],[\"$\",\"strong\",null,{\"children\":\"Framework mapping\"}]]}],[\"$\",\"div\",\"Signed conclusion\",{\"children\":[[\"$\",\"span\",null,{\"children\":\"06\"}],[\"$\",\"strong\",null,{\"children\":\"Signed conclusion\"}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"26:[\"$\",\"section\",null,{\"className\":\"accountability-strip section-pad-dark\",\"children\":[[\"$\",\"div\",null,{\"children\":[[\"$\",\"p\",null,{\"className\":\"section-number light-number\",\"children\":\"08 / ACCOUNTABLE REVIEW\"}],[\"$\",\"h2\",null,{\"children\":\"Independent does not mean anonymous.\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"p\",null,{\"children\":\"Material findings and conclusions receive human review. The report identifies its evidence basis, limitations, scope, and sign-off so a customer can understand what was established and what was not.\"}],[\"$\",\"$L15\",null,{\"className\":\"text-link light-link\",\"href\":\"/about\",\"children\":\"About Ayliea and its assessment practice â\"}]]}]]}]\n27:[\"$\",\"section\",null,{\"className\":\"sample-cta section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"sample-sheet\",\"aria-hidden\":\"true\",\"children\":[[\"$\",\"span\",null,{\"children\":\"SAMPLE\"}],[\"$\",\"strong\",null,{\"children\":\"Finding 04\"}],[\"$\",\"p\",null,{\"children\":\"Third-party AI provider data retention requires further evidence.\"}],[\"$\",\"i\",null,{\"children\":\"MODERATE\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"p\",null,{\"className\":\"section-number\",\"children\":\"09 / BEFORE YOU BOOK\"}],[\"$\",\"h2\",null,{\"children\":\"See exactly what an assessment looks like.\"}],[\"$\",\"p\",null,{\"children\":\"Review the structure, evidence presentation, findings, framework mappings, limitations, and assessor sign-off before booking a call.\"}],[\"$\",\"$L15\",null,{\"className\":\"button button-primary\",\"href\":\"/sample-report\",\"children\":\"See a sample report\"}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"28:[\"$\",\"section\",null,{\"className\":\"pricing-preview section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"section-heading\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"10 / Engagement levels\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"Clear starting points. Scope still matters.\"}],[\"$\",\"p\",null,{\"children\":\"Final pricing depends on the number of AI systems, entities, evidence requirements, frameworks, and overall engagement complexity.\"}]]}],[\"$\",\"div\",null,{\"className\":\"pricing-rows\",\"children\":[[\"$\",\"$L15\",null,{\"href\":\"/pricing\",\"children\":[[\"$\",\"span\",null,{\"children\":\"AI Security Review\"}],[\"$\",\"strong\",null,{\"children\":\"From $3,500\"}],[\"$\",\"i\",null,{\"children\":\"For one defined AI system or workflow â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/pricing\",\"children\":[[\"$\",\"span\",null,{\"children\":\"AI Security Assessment\"}],[\"$\",\"strong\",null,{\"children\":\"From $7,500\"}],[\"$\",\"i\",null,{\"children\":\"Our primary evidence-backed engagement â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/pricing\",\"children\":[[\"$\",\"span\",null,{\"children\":\"Comprehensive Assessment\"}],[\"$\",\"strong\",null,{\"children\":\"From $15,000\"}],[\"$\",\"i\",null,{\"children\":\"For broader environments and evidence needs â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/pricing\",\"children\":[[\"$\",\"span\",null,{\"children\":\"Enterprise / Complex Scope\"}],[\"$\",\"strong\",null,{\"children\":\"Custom\"}],[\"$\",\"i\",null,{\"children\":\"For multiple entities, specialized procedures, or recurring needs â\"}]]}]]}],[\"$\",\"$L15\",null,{\"className\":\"text-link\",\"href\":\"/contact#booking\",\"children\":[\"Discuss your scope \",[\"$\",\"span\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"29:[\"$\",\"section\",null,{\"className\":\"home-resources section-pad-dark\",\"children\":[[\"$\",\"div\",null,{\"className\":\"section-heading inverse\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"11 / Free resources\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"Not ready for an assessment? Start with something useful.\"}],[\"$\",\"p\",null,{\"children\":\"Use Aylieaâs practical resources to improve AI and cybersecurity decisions now. No assessment purchase required.\"}]]}],[\"$\",\"div\",null,{\"className\":\"home-resource-grid\",\"children\":[[\"$\",\"$L15\",null,{\"href\":\"/security-awareness/ai-data-safety\",\"children\":[[\"$\",\"span\",null,{\"children\":\"AI DATA SAFETY\"}],[\"$\",\"h3\",null,{\"children\":\"Before You Paste It Into AI\"}],[\"$\",\"p\",null,{\"children\":\"A 60-second decision guide for employees handling company information around AI tools.\"}],[\"$\",\"strong\",null,{\"children\":\"Open the guide â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/resources/ai-use-policy\",\"children\":[[\"$\",\"span\",null,{\"children\":\"AI GOVERNANCE\"}],[\"$\",\"h3\",null,{\"children\":\"AI Use Policy Template\"}],[\"$\",\"p\",null,{\"children\":\"A practical starting point for defining approved tools, restricted data, responsibilities, and acceptable use.\"}],[\"$\",\"strong\",null,{\"children\":\"Use the template â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/security-awareness/small-business-checklist\",\"children\":[[\"$\",\"span\",null,{\"children\":\"CYBERSECURITY\"}],[\"$\",\"h3\",null,{\"children\":\"Small Business Security Checklist\"}],[\"$\",\"p\",null,{\"children\":\"Twelve foundational controls to review, prioritize, and assign before gaps become incidents.\"}],[\"$\",\"strong\",null,{\"children\":\"Open the checklist â\"}]]}],[\"$\",\"$L15\",null,{\"href\":\"/security-awareness\",\"children\":[[\"$\",\"span\",null,{\"children\":\"RESOURCE HUB\"}],[\"$\",\"h3\",null,{\"children\":\"Cybersecurity Awareness Toolkit\"}],[\"$\",\"p\",null,{\"children\":\"A complete four-week campaign with employee guidance, manager actions, and print-ready resources.\"}],[\"$\",\"strong\",null,{\"children\":\"Explore all resources â\"}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"2a:[\"$\",\"section\",null,{\"className\":\"faq-section section-pad\",\"children\":[[\"$\",\"div\",null,{\"className\":\"section-heading\",\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"12 / Buyer questions\"}],[\"$\",\"h2\",null,{\"id\":\"$undefined\",\"children\":\"Before the assessment begins.\"}],\"$undefined\"]}],[\"$\",\"div\",null,{\"className\":\"faq-list\",\"children\":[[\"$\",\"details\",\"What do we receive from an assessment?\",{\"open\":true,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"01\"}],\"What do we receive from an assessment?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"The engagement can produce a signed assessment with an executive summary, scoped AI inventory, data-flow documentation, evidence-backed findings, risk prioritization, framework references, limitations, and remediation recommendations. Exact contents depend on the agreed scope.\"}]]}],[\"$\",\"details\",\"Can we use the assessment during a customer, regulator, or partner security review?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"02\"}],\"Can we use the assessment during a customer, regulator, or partner security review?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"You may provide the assessment as evidence during relevant security, vendor-risk, procurement, regulatory, or partner diligence. Each reviewer decides what evidence it requires, who may rely on the report, and whether the assessment is sufficient.\"}]]}],[\"$\",\"details\",\"What procedures can be included?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"03\"}],\"What procedures can be included?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"A scope may include document review, stakeholder interviews, configuration inspection, observation, demonstrations, and sampling. The written scope states which procedures were performed and which were not.\"}]]}],[\"$\",\"details\",\"Does the assessment include technical testing?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"04\"}],\"Does the assessment include technical testing?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"Not automatically. Penetration testing, source-code review, model-performance evaluation, AI red-teaming, and continuous monitoring are excluded unless separately scoped and documented.\"}]]}],[\"$\",\"details\",\"How is missing or conflicting evidence handled?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"05\"}],\"How is missing or conflicting evidence handled?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"The report identifies unavailable, stale, conflicting, client-represented, and not-tested evidence. Conclusions are qualified when evidence quality or coverage limits confidence.\"}]]}],[\"$\",\"details\",\"How current is the assessment?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"06\"}],\"How current is the assessment?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"The report is point-in-time. It states its assessment date or period, evidence cutoff, scope, and change-after-assessment boundary. Material changes may require an update or new assessment.\"}]]}],[\"$\",\"details\",\"Can Ayliea receive sensitive or regulated data?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"07\"}],\"Can Ayliea receive sensitive or regulated data?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}
10],[\"$\",\"p\",null,{\"children\":\"Do not send regulated records, personal data, credentials, questionnaires, or assessment evidence through the booking page or initial email. Ayliea avoids receiving unnecessary sensitive data, including PHI, and establishes engagement-specific transfer arrangements in writing.\"}]]}],[\"$\",\"details\",\"What does independent mean?\",{\"open\":false,\"children\":[\"$L34\",\"$L35\"]}],\"$L36\",\"$L37\",\"$L38\",\"$L39\",\"$L3a\"]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"2b:[\"$\",\"section\",null,{\"className\":\"final-cta\",\"children\":[[\"$\",\"div\",null,{\"children\":[[\"$\",\"p\",null,{\"className\":\"eyebrow\",\"children\":\"Next step\"}],[\"$\",\"h2\",null,{\"children\":\"Need a clearer record of your AI security risk?\"}],[\"$\",\"p\",null,{\"children\":\"Use a 20-minute scoping call to clarify what the reviewer is asking for, what belongs in scope, and whether an independent Ayliea assessment is a fit.\"}],[\"$\",\"ul\",null,{\"className\":\"scoping-outcomes\",\"aria-label\":\"Scoping call outcomes\",\"children\":[[\"$\",\"li\",null,{\"children\":\"Clarify the review request\"}],[\"$\",\"li\",null,{\"children\":\"Identify systems and evidence\"}],[\"$\",\"li\",null,{\"children\":\"Define a defensible scope\"}]]}]]}],[\"$\",\"div\",null,{\"className\":\"final-actions\",\"children\":[[\"$\",\"$L15\",null,{\"className\":\"button button-light\",\"href\":\"/contact#booking\",\"children\":\"Request a scoping call\"}],[\"$\",\"$L15\",null,{\"className\":\"text-link light-link\",\"href\":\"/sample-report\",\"children\":[\"See a sample report \",[\"$\",\"span\",null,{\"aria-hidden\":\"true\",\"children\":\"â\"}]]}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"2c:[\"$\",\"footer\",null,{\"className\":\"footer\",\"children\":[[\"$\",\"div\",null,{\"className\":\"footer-brand\",\"children\":[[\"$\",\"$L15\",null,{\"className\":\"wordmark\",\"href\":\"/\",\"children\":[\"AYLIEA\",[\"$\",\"span\",null,{\"className\":\"wordmark-dot\",\"children\":\".\"}]]}],[\"$\",\"p\",null,{\"children\":\"Independent AI security assessments for organizations deploying AI.\"}],[\"$\",\"a\",null,{\"href\":\"mailto:[email protected]\",\"children\":\"[email protected]\"}]]}],[\"$\",\"div\",null,{\"className\":\"footer-links\",\"children\":[[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"Industries\"}],[\"$\",\"$L15\",null,{\"href\":\"/industries/healthcare\",\"children\":\"Healthcare\"}],[\"$\",\"$L15\",null,{\"href\":\"/industries/financial-services\",\"children\":\"Financial services\"}],[\"$\",\"$L15\",null,{\"href\":\"/industries/legal\",\"children\":\"Legal\"}],[\"$\",\"$L15\",null,{\"href\":\"/industries/education\",\"children\":\"Education\"}],[\"$\",\"$L15\",null,{\"href\":\"/industries/technology\",\"children\":\"Technology\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"Assessment\"}],[\"$\",\"$L15\",null,{\"href\":\"/services\",\"children\":\"Services\"}],[\"$\",\"$L15\",null,{\"href\":\"/oklahoma-city-cybersecurity-consulting\",\"children\":\"OKC cybersecurity consulting\"}],[\"$\",\"$L15\",null,{\"href\":\"/sample-report\",\"children\":\"Sample report\"}],[\"$\",\"$L15\",null,{\"href\":\"/pricing\",\"children\":\"Pricing\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"Resources\"}],[\"$\",\"$L15\",null,{\"href\":\"/security-awareness\",\"children\":\"Security awareness\"}],[\"$\",\"$L15\",null,{\"href\":\"/blog\",\"children\":\"Blog\"}],[\"$\",\"$L15\",null,{\"href\":\"/resources/ai-use-policy\",\"children\":\"AI use policy template\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"Firm\"}],[\"$\",\"$L15\",null,{\"href\":\"/about\",\"children\":\"About / assessor\"}],[\"$\",\"$L15\",null,{\"href\":\"/methodology\",\"children\":\"Methodology\"}],[\"$\",\"$L15\",null,{\"href\":\"/trust\",\"children\":\"Trust \u0026 security\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"Contact\"}],[\"$\",\"$L15\",null,{\"href\":\"/contact#booking\",\"children\":\"Request a scoping call\"}],[\"$\",\"$L15\",null,{\"href\":\"/contact\",\"children\":\"Contact\"}],[\"$\",\"$L15\",null,{\"href\":\"/faq\",\"children\":\"FAQ\"}]]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"Legal\"}],[\"$\",\"$L15\",null,{\"href\":\"/privacy\",\"children\":\"Privacy\"}],[\"$\",\"$L15\",null,{\"href\":\"/cookies\",\"children\":\"Cookie policy\"}],[\"$\",\"$L3b\",null,{\"className\":\"self-start text-left text-xs text-[#c7d0d3] hover:text-white focus-visible:text-white transition-colors\"}],[\"$\",\"$L15\",null,{\"href\":\"/legal/dpa\",\"children\":\"Data processing\"}],[\"$\",\"$L15\",null,{\"href\":\"/accessibility\",\"children\":\"Accessibility\"}],[\"$\",\"a\",null,{\"href\":\"/.well-known/security.txt\",\"children\":\"Security.txt\"}]]}]]}],[\"$\",\"div\",null,{\"className\":\"footer-bottom\",\"children\":[[\"$\",\"span\",null,{\"children\":\"© 2026 Ayliea LLC\"}],[\"$\",\"span\",null,{\"children\":\"Assessment evidence, clearly documented.\"}]]}]]}]\n"])</script>
10<script>self.__next_f.push([1,"2d:[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/chunks/0nfn0e7p_sr7v.js\",\"async\":true,\"nonce\":\"$undefined\"}]\n2e:[\"$\",\"$L3c\",null,{\"children\":[\"$\",\"$32\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@3d\"}]}]\n"])</script>
10<script>self.__next_f.push([1,"34:[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"08\"}],\"What does independent mean?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}]\n35:[\"$\",\"p\",null,{\"children\":\"Ayliea is an external, paid assessor rather than the organization being assessed or its regulator. Independence does not imply governmental authority. Potential conflicts are addressed during scoping, and commercial outcomes are not guaranteed.\"}]\n36:[\"$\",\"details\",\"How are corrections handled?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"09\"}],\"How are corrections handled?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"Factual errors and evidence references can be corrected through a documented review process. A request to change a commercial outcome does not require the assessor to change a supported professional conclusion.\"}]]}]\n37:[\"$\",\"details\",\"How long does an engagement take?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"10\"}],\"How long does an engagement take?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"Timing depends on the agreed scope, system count, entities, procedures, evidence readiness, and stakeholder availability. The written scope sets the expected assessment period and delivery plan before work begins.\"}]]}]\n38:[\"$\",\"details\",\"How much does an engagement cost?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"11\"}],\"How much does an engagement cost?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"AI Security Reviews start at $3,500; AI Security Assessments start at $7,500; Comprehensive AI Security Assessments start at $15,000; Enterprise / Complex Scope engagements are custom-scoped. Final pricing is confirmed in a written scope before work begins.\"}]]}]\n39:[\"$\",\"details\",\"Do you certify HIPAA compliance?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"12\"}],\"Do you certify HIPAA compliance?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"No. Ayliea does not provide a government-backed HIPAA certification, certify that an organization is HIPAA compliant, or guarantee compliance. Relevant findings may be mapped to applicable HIPAA Security Rule safeguards.\"}]]}]\n3a:[\"$\",\"details\",\"What security frameworks do you assess against?\",{\"open\":false,\"children\":[[\"$\",\"summary\",null,{\"children\":[[\"$\",\"span\",null,{\"children\":\"13\"}],\"What security frameworks do you assess against?\",[\"$\",\"i\",null,{\"aria-hidden\":\"true\",\"children\":\"+\"}]]}],[\"$\",\"p\",null,{\"children\":\"Ayliea maps and aligns relevant findings to established AI security frameworks: NIST AI RMF 1.0, ISO/IEC 42001:2023, HIPAA Security Rule, OWASP LLM Top 10, MITRE ATLAS. These references frame the findings so a receiving reviewer can place them in a familiar context. Mapping and alignment are not certification or endorsementâAyliea is not a certification bodyâand professional judgments and evidence-quality decisions remain explained and attributable to the assessor.\"}]]}]\n"])</script>
10<script>self.__next_f.push([1,"30:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n"])</script>
10<script>self.__next_f.push([1,"3e:I[27201,[\"/_next/static/chunks/05-c3ty_6dwfk.js\",\"/_next/static/chunks/2omxb_s-c15_c.js\"],\"IconMark\"]\n"])</script>
10<script>self.__next_f.push([1,"33:[[\"$\",\"title\",\"0\",{\"children\":\"Independent AI Security Assessments | Ayliea\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"Independent, evidence-backed AI security assessments for organizations deploying AI systems, agents, vendors, and workflows around sensitive data.\"}],[\"$\",\"meta\",\"2\",{\"name\":\"keywords\",\"content\":\"AI security assessment,independent AI security assessment,AI vendor risk assessment,vendor security review,HIPAA AI assessment,NIST AI RMF assessment,healthcare AI vendor risk,signed AI security assessment,independent AI assessor,AI risk assessment healthcare,AI governance healthcare\"}],[\"$\",\"link\",\"3\",{\"rel\":\"canonical\",\"href\":\"https://ayliea.com\"}],[\"$\",\"meta\",\"4\",{\"property\":\"og:title\",\"content\":\"Independent AI Security Assessments | Ayliea\"}],[\"$\",\"meta\",\"5\",{\"property\":\"og:description\",\"content\":\"Independent, evidence-backed AI security assessments for organizations deploying AI systems, agents, vendors, and workflows around sensitive data.\"}],[\"$\",\"meta\",\"6\",{\"property\":\"og:url\",\"content\":\"https://ayliea.com\"}],[\"$\",\"meta\",\"7\",{\"property\":\"og:type\",\"content\":\"website\"}],[\"$\",\"meta\",\"8\",{\"name\":\"twitter:card\",\"content\":\"summary_large_image\"}],[\"$\",\"meta\",\"9\",{\"name\":\"twitter:title\",\"content\":\"Independent AI Security Assessments | Ayliea\"}],[\"$\",\"meta\",\"10\",{\"name\":\"twitter:description\",\"content\":\"Independent, evidence-backed AI security assessments for organizations deploying AI systems, agents, vendors, and workflows around sensitive data.\"}],[\"$\",\"link\",\"11\",{\"rel\":\"icon\",\"href\":\"/favicon.ico?favicon.39dpkt9prs2_5.ico\",\"sizes\":\"48x48\",\"type\":\"image/x-icon\"}],[\"$\",\"link\",\"12\",{\"rel\":\"icon\",\"href\":\"/icon.png?icon.1vf49v44c5ckn.png\",\"sizes\":\"180x180\",\"type\":\"image/png\"}],[\"$\",\"link\",\"13\",{\"rel\":\"apple-touch-icon\",\"href\":\"/apple-icon.png?apple-icon.1vf49v44c5ckn.png\",\"sizes\":\"180x180\",\"type\":\"image/png\"}],[\"$\",\"$L3e\",\"14\",{}]]\n"])</script>
10<script>self.__next_f.push([1,"3d:null\n"])</script>
10</body></html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.