1. The Frameworks
The Frameworks supported by the Service as at the date of this Schedule are:
| Framework | Instrument | Status |
|---|---|---|
| EU AI Act | EU AI Act — Regulation (EU) 2024/1689 | Binding EU law. Directly applicable in every Member State. |
| ISO 42001 | ISO/IEC 42001:2023 — AI management system | Voluntary international standard. Certification is granted only by an accredited certification body. |
| ISO 27001 | ISO/IEC 27001:2022 — Information security | Voluntary international standard. Certification is granted only by an accredited certification body. |
| GDPR | GDPR — Regulation (EU) 2016/679 | Binding EU law. Directly applicable in every Member State. |
| NIST AI RMF | NIST AI Risk Management Framework 1.0 | Voluntary framework published by a United States agency. Not law in the European Union. |
2. Which Frameworks you get
Access to a particular Framework within the Service may depend on your Tier or on a programme purchased separately. The Frameworks available to you are those identified in your subscription; the Tiers and what each one includes are set out in Schedule 1.
3. Changes to this Schedule
We may add Frameworks to the Service, and this Schedule will be updated when we do. We may also remove or reduce support for a Framework, but not in a way that materially degrades a Framework you have paid for during a paid term. Where we intend to do so, clause 3.3 of the Agreement gives you not less than 60 days' written notice and a right to terminate the affected part of your subscription, with a refund of fees paid for the unexpired period, if you tell us within 30 days of that notice that the change materially affects you.
4. No endorsement, and no standards text
Support for a Framework does not imply endorsement by, or any relationship with, the body that publishes it. Veritome is not a certification body, a notified body or an accredited auditor, and nothing produced by the Service constitutes certification under any standard — see clauses 3.5 and 13.3 of the Agreement.
Standards documents published by ISO, IEC, CEN, CENELEC, NSAI or other standards bodies are the copyright of those bodies and are not supplied with the Service. Where the Service refers to a standard it does so by reference and in paraphrase. You are responsible for obtaining your own licensed copies of any standard you need. See clause 10 of the Agreement.
5. The Agreement
Read this Schedule with the Veritome Platform Subscription Agreement, which governs your subscription, and with Schedule 1, which sets out the Tiers and their service levels.