A guided assessment, a private evidence vault, and an independent reviewer who verifies what you show. No consultants in your office.
Forty controls, eight per domain, each scored 0 to 3. Every domain is worth 20 points. Your total is out of 100.
Named owner, written policy, approved tools, board oversight.
20 ptsWhat goes into AI, what must not, and how it is protected.
20 ptsHuman review, incident handling, vendor due diligence.
20 ptsTraining, acceptable use, role-based competence.
20 ptsDisclosure, engagement terms, answering client questions.
20 ptsBelow 60 stays private. You receive a gap plan and one re-submission at no charge.
No level is awarded without these, whatever the total.
The full control set is published in The AboveBoard Standard v1.0, mapped to NIST AI RMF and cross-walked to ISO/IEC 42001. The optional Stewardship Endorsement is scored separately and never changes your 0 to 100.
Most of your time is in weeks one to three. Ours is in weeks four to six.
Ten questions, instant provisional score and your biggest gaps.
You: 3 minutesForty plain-English questions. Save and return any time.
You: 2 to 3 hoursUpload policies, records and vendor terms. Templates for anything missing.
You: a few hoursYour reviewer samples evidence and books a 45-minute call with your AI owner.
You: one callA firewalled officer confirms the score. Findings and gap plan drafted.
UsBoard report delivered, badge issued, registry entry live.
DoneA score is only worth what the review behind it is worth. Five rules, published and enforced.
A trained reviewer examines evidence. A separate certification officer confirms the score.
The officer who signs off has no sales target and no commission on your account.
If noboxAI trains or advises your firm, a different reviewer scores it. Never both in one cycle.
Every control, point value and gate is public. Nothing is scored against a rule you cannot read.
Badges show the year. Registry entries lapse if not renewed. Old proof looks old.
Disagree with a finding? Appeal in writing and a second officer rules within ten business days.
AboveBoardAI issues scores and verifications against a private, voluntary standard. It does not issue attestations or opinions and is not a regulator or an ISO certification body. See Independence & impartiality.