Questions we get asked most

TrustHuman is an independent AI ethics assessment platform. We connect to your AI tool's API endpoint, send carefully designed synthetic test inputs — called probes — and score the responses against specific legal and ethical criteria. You receive a TrustHuman Score™, a detailed findings report, and a Bronze, Silver, or Gold rating.

We are not a consultancy selling reports. We are not a questionnaire. We probe your AI directly to see how it actually behaves.

Any UK organisation that has deployed an AI tool that interacts with or makes decisions about people. Our current focus is four sectors where the risks are most acute and the regulatory pressure is greatest:

• Financial services — lending, credit assessment, customer service AI
• HR and recruitment — candidate screening and hiring tools
• Healthcare — patient triage and support systems
• Retail and services — customer service chatbots and returns automation

If you are a compliance officer, chief risk officer, data protection officer, or head of digital — and you are not certain your AI tools are behaving fairly, transparently, and securely — TrustHuman is for you.

The main platforms in this space — Credo AI, IBM watsonx.governance, OneTrust — are built for large enterprises with dedicated AI governance teams, significant budgets, and months to implement. They are comprehensive lifecycle management tools.

TrustHuman is different in three ways. It is self-serve — you can run an assessment in minutes, without a procurement process. It uses live probe testing — we test how your AI actually behaves, not how you say it behaves. It is built for the UK mid-market — specifically mapped to UK GDPR, the Equality Act 2010, the EU AI Act, and ICO guidance.

Not yet. TrustHuman certifications are currently issued on the basis of our own methodology and scoring framework. We are honest about this — our Bronze, Silver, and Gold certifications represent a rigorous and legally-mapped assessment, but they do not yet carry UKAS accreditation.

Pursuing UKAS accreditation as a formal certification body is on our roadmap. In the meantime, our reports provide the specific, evidence-based findings that your compliance team and legal advisers need to make informed decisions. On the roadmap

Both — and in between. You can run an assessment before you deploy a tool (to check what you're about to put live), on your live system (to see how the AI you're actually running behaves), and again after any change — a new data source, a model update, a new integration. Compliance isn't a one-time event; the AI running today isn't always the one you checked last month, so TrustHuman is designed to be run whenever you need that certainty.

No. A common misconception is that compliance checking only happens after the fact. You can assess a tool before it goes live — useful when you're evaluating or about to deploy something new — as well as on a live system and after changes. Checking before you deploy can save you from putting a non-compliant tool in front of customers in the first place.

Possibly. Even if you haven't changed the tool, the rules can change, your usage can drift, or a model update from your vendor can shift its behaviour. Re-running an assessment periodically — and after any change your end — is how you stay confident it's still compliant, not just compliant on the day you first checked.

TrustHuman's assessment criteria are mapped to a regulatory register that is monitored monthly via automated checks directly against official sources — official data from legislation.gov.uk, GOV.UK and EUR-Lex where it exists, and a comparison against a saved copy of the page for the ICO, FCA and EU Commission. When a source changes, the system flags it and generates a plain-English summary of what may have changed and what the scoring impact could be. A human reviews that summary and must approve any update before it reaches the engine. Only approved changes are applied, via a tracked pull request — so every change is version-controlled and auditable.

Sources that are temporarily unavailable are flagged as errors, not silently skipped. The full change log — including every update to scoring criteria and regulatory basis — is published at trusthuman.co.uk/methodology.

Not in real time. You can run a check whenever you need one (before deploying, live, or after changes). With the Heartbeat Assessment, we also run the same check for you once a month and email you the result, with an alert if the score drops by 10 points or more or a new critical problem appears. We don't watch your AI between checks. On the roadmap

Yes — we offer a free TrustScore. Create a free account, connect your live AI tool's endpoint, run a full assessment, and receive your overall TrustHuman Score™ with a traffic light rating at no charge.

The free TrustScore shows your overall score and rating, your pillar scores, and which checks passed or failed and how serious each failure is. The full Snapshot Assessment report adds the findings behind each result, the evidence (what we sent and how your AI replied), the exact legal provisions, and recommended actions.

To get your free TrustScore, go to /check — you'll need a free account, and no payment or access code is required.

Your free TrustScore report includes:

• Overall TrustHuman Score™ — 0 to 100
• Traffic light rating — Low risk (75–100), Moderate risk (50–74), High risk (0–49)
• Your score for each pillar — bias, transparency and privacy
• Which checks passed or failed, and how serious each failure is

The full report adds the findings behind each result, the evidence (what we sent and how your AI replied), the exact legal provisions, and recommended actions. Get in touch to request a full report.

You provide your AI tool's API endpoint URL and authentication credentials. TrustHuman sends six synthetic test inputs — two per pillar — directly to your tool and captures the responses. An independent assessment engine then scores each response against specific legal and ethical criteria. How long it takes depends on a few things, such as how quickly your AI replies and which assessment you run, but it is usually under 5 minutes.

No real customer data is used at any point. All probes are synthetic inputs designed specifically for testing purposes.

TrustHuman currently tests across three pillars — the three areas where AI tools create the greatest legal and reputational risk for UK organisations:

Bias and Discrimination (40%) — does the AI treat people differently based on age, postcode, or socioeconomic background? Mapped to the Equality Act 2010 and EU AI Act Annex III.

Transparency and Explainability (35%) — does the AI disclose that it is an AI when asked? Can it explain its decisions? Mapped to EU AI Act Article 50 and UK GDPR Article 22C.

Data Privacy and Security (25%) — is the AI vulnerable to prompt injection attacks? Does it handle data subject rights requests correctly? Mapped to UK GDPR and the ICO guidance on AI and data protection.

The TrustHuman Score™ is a weighted average of your pillar scores, from 0 to 100. A higher score means better alignment with legal and ethical requirements. The weighting reflects the relative regulatory risk of each pillar.

• 90–100 · Gold — Excellent alignment. Continue monitoring.
• 75–89 · Silver — Good alignment with minor gaps. Address priority findings.
• 60–74 · Bronze — Adequate. Material gaps present. Supervised deployment recommended.
• Below 60 · Not Certified — Significant compliance failures. Immediate remediation required.

This is a fair question and we take it seriously. A few things make gaming difficult in practice:

First, the probe inputs are not disclosed to assessed organisations. Second, the probe library will expand and rotate over time — there is no fixed set to optimise against. Third, from Phase 2 we will use a multi-model assessment panel, which makes the scoring behaviour less predictable than a single model.

More fundamentally — if an organisation puts genuine effort into making their AI behave fairly, transparently, and securely in order to pass the assessment, that is exactly the outcome we are trying to achieve. The probes are proxies for real compliance. An AI that passes them has genuinely improved.

AI tools change. Models are updated by vendors. Prompts and configurations drift. A tool that passed an assessment six months ago may behave differently today.

Our general guidance is a full reassessment every six months after a Snapshot Assessment, or whenever the underlying model, configuration, or deployment context changes significantly. The Heartbeat Assessment re-runs your Snapshot or Tailored Assessment every month and emails you each result, so you don't have to remember to reassess.

TrustHuman uses a structured assessment methodology built on fixed scoring rules mapped directly to UK and EU regulatory frameworks — the Equality Act 2010, UK GDPR Article 22C, EU AI Act Article 50, and the ICO guidance on AI and data protection.

The engine does not use one AI model to assess another in real time. Regulatory text is pinned and versioned so your assessment is always traceable to a specific legal reference.

Claude by Anthropic supports certain elements of the platform experience, but the compliance scoring methodology is independent of any single AI model's judgement. Technical

You can — and it might give you some useful directional insight. But it will not give you what TrustHuman gives you for four specific reasons:

No methodology — an ad-hoc conversation has no structured probe set, no legal mapping, and no scoring rubric. The results are not reproducible and not comparable.

No independence — TrustHuman is a third party with no relationship to the AI vendor. That independence matters when presenting findings to leadership, a regulator, or a legal team.

No reproducibility — TrustHuman runs the same probes the same way every time, against pinned regulatory text.

No certification — a chat transcript is not a certification. TrustHuman produces a Bronze, Silver, or Gold certificate your compliance register can reference.

All probes use synthetic inputs only — no real customer data is used or transmitted at any point during an assessment. Your API credentials are used only to make the probe calls and are not stored by TrustHuman, unless you switch on Heartbeat: then a test-only key is stored locked (encrypted) for the monthly checks and deleted when Heartbeat stops.

Your saved assessment reports, including the probe messages and your AI's responses, are kept in your account so you can review them. They're deleted on request (including when you delete a report, an AI or your Other reports in your AI inventory, or your account) or after 2 years of inactivity. See Data & security for details.

When a report is saved, we email you your results: the score, what was tested and a link to the report. Emails never include the probe messages or your AI's responses. You can turn them off in your account. Technical

TrustHuman can assess any AI tool that is accessible via a REST API endpoint — which covers the vast majority of deployed customer-facing AI tools. You need to provide an endpoint URL and an authentication method. For chat and agent tools, TrustHuman sends each test as JSON in a message field and reads the reply from a response, message, text, content or answer field. For decision APIs, it sends standard test applicants (name, age and postcode); mapping to your own field names isn't available yet.

Tools that cannot currently be assessed include AI tools with no API access, tools that require browser-based interaction only, or tools behind enterprise firewalls without external access. If you are unsure whether your tool is compatible, contact us at hello@trusthuman.co.uk and we will confirm.

Every finding in a TrustHuman report maps to a specific legal or regulatory obligation:

• Equality Act 2010 — bias and discrimination findings
• UK GDPR Article 22C — safeguards for automated decisions: information, human review and the right to contest
• EU AI Act Article 50 — AI disclosure obligations
• EU AI Act Annex III — high-risk AI system requirements
• ICO guidance on AI and data protection — data privacy and security findings
• UK GDPR — data subject rights handling

This means every finding in your report has a direct legal hook — giving your legal team exactly what they need to prioritise remediation. Legal

TrustHuman certifications are not a substitute for regulatory compliance — they are evidence of due diligence. No single certification satisfies all regulatory obligations on its own.

What a TrustHuman report does provide is documented, evidence-based proof that you assessed your AI tool against specific regulatory criteria, identified findings, and were in a position to act on them. Regulators and courts look favourably on organisations that can demonstrate active and structured governance of their AI systems.

We are not lawyers and this is not legal advice. If you have specific regulatory obligations, we recommend speaking with a qualified legal adviser about how TrustHuman assessment can support your compliance programme. Legal

The EU AI Act is now in force. High-risk AI system obligations — including AI tools used in employment, credit, healthcare, and essential services — began applying in August 2026. UK businesses that operate in the EU or use AI tools from EU vendors are directly affected.

Built for UK businesses — TrustHuman covers EU AI Act obligations where they apply to you, including Article 50 transparency requirements for businesses with EU customers or EU market operations.

Key obligations for high-risk AI systems include: maintaining a risk management system, ensuring transparency with users including disclosure of AI status, enabling meaningful human oversight, and keeping documentation sufficient for regulatory audit.

TrustHuman's three-pillar assessment maps directly to the most commonly failed obligations under the Act. A Silver or Gold rating demonstrates that you have actively assessed your AI against these requirements. Legal

It is not too late — but it is urgent. The enforcement window has opened, which means regulators can now act on complaints and conduct investigations. The ICO has signalled active interest in AI governance in regulated sectors including financial services, healthcare, and employment.

The best thing you can do right now is document that you are actively assessing and improving your AI governance posture. A TrustHuman assessment is a concrete, timestamped record of exactly that. Legal

There's a free demo, a free TrustScore, two paid assessments available now, and one more coming soon:

Free demo — Run a full three-pillar assessment against a pre-built AI scenario in your industry and see an example TrustHuman Score™ report with illustrative results. No code or sign-up needed. Start at trusthuman.co.uk/demo.

Snapshot Assessment — One-off report — A complete point-in-time assessment against your live AI endpoint with detailed findings for each probe, regulatory exposure mapped to specific provisions, risk levels, and recommended remediation actions. Includes Bronze/Silver/Gold rating and a printable report. Available now. Contact TrustHuman for pricing — hello@trusthuman.co.uk.

Tailored Assessment — available now — Everything in the Snapshot Assessment, plus extra checks selected from our fixed, published library to match the risks you tell us about in a short intake form. Same fixed scoring rules, nothing generated by AI. 3 reports, valid for 12 months, plus 1 free re-run of the same AI within 90 days to check your fixes. Contact TrustHuman for pricing.

Heartbeat Assessment — available now — Re-runs your Snapshot or Tailored Assessment every month on each AI you choose (12 monthly checks per AI over 12 months) so you can see how your AI's results change over time. Contact TrustHuman for pricing.

For pricing, or to request a Tailored or Heartbeat Assessment, email hello@trusthuman.co.uk. Pricing

The Snapshot Assessment is a one-off point-in-time assessment against your live AI endpoint. Pricing has not been set yet. Contact TrustHuman for pricing at hello@trusthuman.co.uk.

To see what the full report contains, run the free demo at trusthuman.co.uk/demo — no code or sign-up needed.

Both are available now. Contact TrustHuman for pricing.

Tailored Assessment — Runs everything in the Snapshot Assessment, plus extra checks selected from our fixed, published library to match the risks you tell us about in a short intake form. Your headline score is calculated exactly as in the Snapshot Assessment, and the extra checks are reported alongside it. The report shows which checks ran, why, and which risks weren't covered. Results depend on the quality of the assessment you provide. You get 3 reports, valid for 12 months, plus 1 free re-run of the same AI within 90 days to check your fixes. Each full report has a one-page summary, a priority fix list, a risk map, and a PDF with a code anyone can check at trusthuman.co.uk/verify. Contact TrustHuman for pricing.

Heartbeat Assessment — Re-runs your Snapshot or Tailored Assessment every month on each AI you choose (12 monthly checks per AI over 12 months), emails you each result, and shows how your AI's results change over time. You switch it on with "Check every month" on the AI's page in your AI inventory. To run the checks, we keep your AI's address and a test-only key locked (encrypted), and delete them when Heartbeat stops.

To request a Tailored or Heartbeat Assessment: hello@trusthuman.co.uk. Products

Yes — and we encourage it. The free demo at trusthuman.co.uk/demo lets you run a full three-pillar assessment against a pre-built AI scenario in your industry. You will see exactly what the probe inputs look like, what a flawed AI response looks like, and what the full report contains — including risk flags, regulatory exposure, and recommended actions.

If you would like a guided demo or a conversation about your specific situation, email hello@trusthuman.co.uk and we will arrange a call.

Three types. Platforms and marketplaces — if you list or distribute AI tools and want to offer compliance assessment as part of your offering. AI tool builders — if you develop AI products and want your customers to have independent third-party compliance evidence. Referral partners — if you work with businesses as their accountant, advisor, insurer, or formation agent and want a credible answer when AI compliance comes up with your clients.

Find out more at trusthuman.co.uk/partners.

Commission rates and revenue share arrangements are agreed individually based on partnership type and volume. All arrangements are confirmed in writing and non-exclusive before anything goes live.

During the proof of concept period (90 days from launch), the commission rate is 0% for all partners — this lets both parties validate the integration and confirm commercial fit before the standard revenue share applies. Get in touch to discuss the right commercial model for your partnership.

No. TrustHuman partnerships are always non-exclusive. You retain full commercial freedom to work with other AI compliance providers. TrustHuman will continue to develop other partnerships in parallel. This is confirmed in writing as part of every partnership arrangement.

The POC period is 90 days from the marketplace or integration launch date. During this time the commission rate is 0% — the partner pays nothing and TrustHuman takes the full assessment fee. This lets both parties validate the integration, test the customer journey, and confirm commercial fit before the standard revenue split applies.

TrustHuman operates as an API-first serverless platform. A marketplace partner calls TrustHuman's assessment API with the customer's endpoint details, industry, and assessment mode. TrustHuman runs the full assessment and returns a structured JSON result — TrustScore, pillar scores, findings, regulatory citations, and recommended actions. The partner renders the results within their own UI.

Full API documentation is provided as part of the partner onboarding process.

Get in touch via trusthuman.co.uk/contact or visit trusthuman.co.uk/partners to find out more. We respond within one business day. The first conversation is a no-obligation discussion about fit — no sales pressure, no commitment required.

TrustHuman uses one optional analytics cookie (Google Analytics 4) to understand how visitors use the site — which pages are visited, how long people spend, and where they come from. This helps us improve the product.

We ask for your consent before this cookie is set. If you decline, no analytics data is collected. Your preference is saved in your browser and you can change it at any time by clearing your browser's local storage.

No personally identifiable information is collected through analytics. TrustHuman does not use advertising cookies, tracking pixels, or any third-party marketing cookies.