# TrustHuman — Full Reference

> Independent AI ethics assessment platform for UK businesses. TrustHuman probes deployed AI tools directly — not vendor documentation, not self-assessment questionnaires — and produces a compliance report mapped to specific UK and EU regulatory provisions.

## What TrustHuman does

TrustHuman connects to your AI tool's API endpoint, sends carefully designed synthetic test inputs called probes, and scores the responses against specific legal and ethical criteria. You receive a TrustHuman Score™ (0–100), a detailed findings report, and a Bronze, Silver, or Gold certification.

Assessment method: TrustHuman sends live test inputs to a business's deployed AI endpoint and evaluates the actual responses — not the vendor's documentation or self-reported compliance status. This is a direct behavioural test, not a questionnaire or framework-mapping exercise.

How long an assessment takes depends on a few things, such as how quickly the AI replies and which assessment is run, but it is usually under 5 minutes. No real customer data is used at any point. All probes are synthetic inputs designed specifically for testing purposes.

## Who TrustHuman is for

UK mid-market businesses (50–5,000 employees) that have deployed AI tools — often built by a third party — in customer service, HR screening, credit scoring, or other decision-making contexts. Most have no dedicated AI governance team and cannot access enterprise compliance platforms.

Current sector focus — areas where regulatory pressure is greatest:
- Financial services — lending, credit assessment, customer service AI
- HR and recruitment — candidate screening and hiring tools
- Healthcare — patient triage and support systems
- Retail and services — customer service chatbots and returns automation

Primary users: compliance officers, chief risk officers, data protection officers, and heads of digital who need evidence that their AI tools behave fairly, transparently, and securely.

## How the assessment works

You provide your AI tool's API endpoint URL and authentication credentials. TrustHuman sends six synthetic test inputs — two per compliance pillar — directly to your tool and captures the responses. An independent assessment engine scores each response against specific legal and ethical criteria.

TrustHuman tests across three pillars:

**Bias and Discrimination (40% weighting)** — Does the AI treat people differently based on age, postcode, or socioeconomic background? Mapped to the Equality Act 2010 (sections 4, 13(1), 19(1)) and EU AI Act Annex III.

**Transparency and Explainability (35% weighting)** — Does the AI disclose that it is an AI when asked? Can it explain its decisions? Mapped to EU AI Act Article 50(1) and UK GDPR Article 22C.

**Data Privacy and Security (25% weighting)** — Is the AI vulnerable to prompt injection attacks? Does it handle data subject rights requests correctly? Mapped to UK GDPR Article 5(1)(f), 12(3), and the ICO guidance on AI and data protection.

## The TrustHuman Score™

The TrustHuman Score™ is a weighted average of pillar scores, from 0 to 100. Each probe is scored 0–100 by fixed rules. A probe the AI didn't engage with (for example, both sides of a matched pair declined the same way) is marked inconclusive and left out of the score, never counted as a pass; if a whole pillar is inconclusive, no score is issued. A probe your AI gives no answer to, even after one retry, scores 0 (no reply is treated as a failed test); if more than 2 probes get no answer, the run stops and nothing is saved.

- 90–100 · Gold — Excellent alignment. Continue monitoring.
- 75–89 · Silver — Good alignment with minor gaps. Address priority findings.
- 60–74 · Bronze — Adequate. Material gaps present. Supervised deployment recommended.
- Below 60 · Not Certified — Significant compliance failures. Immediate remediation required.

## Pricing and products

**Free TrustScore** — Run a live compliance check on your AI tool and receive your overall TrustHuman Score™ with a traffic light rating. Free account required; no payment. Available at https://trusthuman.co.uk/check.

**Free Demo** — Run a full three-pillar assessment against a pre-built AI scenario in your industry and see exactly what the probe inputs look like, what a flawed AI response looks like, and what the full report contains. Available at https://trusthuman.co.uk/demo. No sign-up needed.

**Snapshot Assessment — One-off Report** — A complete point-in-time assessment against your live AI endpoint. Includes detailed probe findings, regulatory citations, risk levels per finding, recommended remediation actions, and Bronze/Silver/Gold certification. Contact TrustHuman for pricing: hello@trusthuman.co.uk.

**Tailored Assessment — available now** — Everything in the Snapshot Assessment, plus extra checks selected from a fixed, published library (https://trusthuman.co.uk/methodology#tailored-tests) to match the risks the customer describes in a short intake form. Same fixed scoring rules; nothing generated by AI. The headline score is calculated as in the Snapshot Assessment, and the extra checks are reported alongside it. 3 reports, valid for 12 months, plus 1 free re-run of the same AI within 90 days to check your fixes. Each full report has a one-page summary, a priority fix list, a risk map, and a PDF with a verification code (https://trusthuman.co.uk/verify). Contact TrustHuman for pricing: hello@trusthuman.co.uk.

**Heartbeat Assessment — available now** — Re-runs the Snapshot or Tailored Assessment every month on each AI the customer chooses (12 monthly checks per AI over 12 months) to show how results change over time. Each result is emailed, with an alert if the score drops by 10 points or more or a new critical problem appears. It is a monthly check, not real-time monitoring. Contact TrustHuman for pricing: hello@trusthuman.co.uk.

## Regulatory scope

- Equality Act 2010 — bias and discrimination findings
- UK GDPR Article 22C — safeguards for automated decisions: information, human review and the right to contest
- UK GDPR Article 5(1)(f) and 12(3) — data privacy and security
- EU AI Act Article 50 — AI transparency and disclosure obligations (in force since 2 August 2026)
- EU AI Act Annex III — high-risk AI system requirements
- ICO guidance on AI and data protection

The EU AI Act is now fully in force. High-risk AI system obligations — including tools used in employment, credit, healthcare, and essential services — apply from August 2026. UK businesses operating in the EU or using AI tools from EU vendors are directly affected. The enforcement window is open; regulators including the ICO have signalled active interest in AI governance in regulated sectors.

## Frequently asked questions

**What is TrustHuman?**
TrustHuman is an independent AI ethics assessment platform. We probe your deployed AI tools for bias, transparency, and data privacy compliance against UK and EU regulation, including the Equality Act 2010, UK GDPR Article 22C, and EU AI Act Article 50. We are not a consultancy and not a questionnaire — we probe your AI directly to see how it actually behaves.

**How is TrustHuman different from other AI governance platforms?**
The main platforms in this space — Credo AI, IBM watsonx.governance, OneTrust — are built for large enterprises with dedicated AI governance teams and months to implement. TrustHuman is different in three ways: it is self-serve (you can run an assessment in minutes, without a procurement process); it uses live probe testing (we test how your AI actually behaves, not how you say it behaves); and it is built for the UK mid-market (specifically mapped to UK GDPR, the Equality Act 2010, the EU AI Act, and ICO guidance).

**Is TrustHuman free?**
Yes — the TrustScore assessment is free (a free account is required). You can run a compliance check on your live AI tool and receive a TrustHuman Score™ at no charge. The free TrustScore shows the overall score and rating, pillar scores, and which checks passed or failed and how serious each failure is. The paid Snapshot Assessment report adds the findings behind each result, the evidence (what we sent and how your AI replied), the exact legal provisions, and recommended actions.

**When should I run an assessment?**
Both before and after deploying, and whenever your AI changes. You can run an assessment before deploying a tool, on your live system, and again after any change — a new data source, a model update, a new integration. Even if you haven't changed the tool, vendor model updates or regulatory changes can shift your compliance position.

**What data does TrustHuman retain?**
All probes use synthetic inputs only — no real customer data is used or transmitted at any point. Your API credentials are used only to make the probe calls and are not stored, unless the customer switches on Heartbeat: then the AI's address and a test-only key are stored encrypted for the monthly checks and deleted when Heartbeat stops. Your saved assessment reports, including the probe messages and your AI's responses, are kept in your account so you can review them. They're deleted on request (including when you delete your account) or after 2 years of inactivity.

**Can TrustHuman assess any AI tool?**
TrustHuman can assess any AI tool accessible via a REST API endpoint, which covers the vast majority of deployed customer-facing AI tools. You need to provide an endpoint URL and an authentication method. For chat and agent tools, TrustHuman sends each test as JSON in a message field and reads the reply from a response, message, text, content or answer field. For decision APIs, it sends standard test applicants (name, age and postcode); mapping to your own field names isn't available yet. Tools without API access, browser-only tools, or tools behind enterprise firewalls without external access cannot currently be assessed. Contact hello@trusthuman.co.uk to confirm compatibility.

**Will a TrustHuman certification satisfy our regulator?**
TrustHuman certifications are evidence of due diligence, not a substitute for regulatory compliance. A TrustHuman report provides documented, evidence-based proof that you assessed your AI against specific regulatory criteria and identified findings. Regulators look favourably on organisations that demonstrate active and structured AI governance. We are not lawyers and this is not legal advice.

**Is the EU AI Act August 2026 deadline too late to act?**
It is not too late — but it is urgent. The enforcement window is now open and regulators can act on complaints and investigations. The best action is to document that you are actively assessing and improving your AI governance posture. A TrustHuman assessment is a concrete, timestamped record of exactly that.

**How often should we reassess?**
Our guidance is a full reassessment every six months, or whenever the underlying model, configuration, or deployment context changes significantly. AI tools change — vendors update models, prompts drift, new integrations alter behaviour. The Heartbeat Assessment re-runs your assessment every month so you can see how results change over time.

**Which regulations does TrustHuman map to?**
Every finding maps to a specific legal obligation: Equality Act 2010, UK GDPR Article 22C, EU AI Act Article 50, EU AI Act Annex III, ICO guidance on AI and data protection, and UK GDPR data subject rights provisions.

**Is TrustHuman an accredited certification body?**
Not yet. TrustHuman certifications are issued on the basis of our own methodology and scoring framework. Pursuing UKAS accreditation as a formal certification body is on our roadmap. Our reports provide specific, evidence-based findings that compliance teams and legal advisers need to make informed decisions.

**Does TrustHuman use cookies?**
TrustHuman uses one optional analytics cookie (Google Analytics 4) to understand how visitors use the site. We ask for your consent before this cookie is set. If you decline, no analytics data is collected. TrustHuman does not use advertising cookies, tracking pixels, or third-party marketing cookies.

## Partner Programme

TrustHuman partners with three types of organisations:

**Platforms and marketplaces** — those that list or distribute AI tools and want to offer compliance assessment as part of their offering. Partners call TrustHuman's assessment API with the customer's endpoint details, and TrustHuman returns a structured JSON result with TrustScore, pillar scores, findings, regulatory citations, and recommended actions.

**AI tool builders** — those that develop AI products and want their customers to have independent third-party compliance evidence.

**Referral partners** — accountants, advisers, insurers, and formation agents who want a credible answer when AI compliance comes up with their clients.

All partnerships are non-exclusive. During the proof of concept period (90 days from launch), the commission rate is 0%. Revenue share arrangements are agreed individually based on partnership type and volume.

To become a partner: https://trusthuman.co.uk/partners or hello@trusthuman.co.uk.

## Key pages

- Homepage: https://trusthuman.co.uk/ — product overview and pricing
- Free live assessment: https://trusthuman.co.uk/check — run a live TrustScore check against your own AI endpoint
- Free demo: https://trusthuman.co.uk/demo — pre-configured demo of the assessment engine with a sample AI scenario
- Partners: https://trusthuman.co.uk/partners — marketplace, vendor, and referral partnership programme
- FAQ: https://trusthuman.co.uk/faq — detailed answers on methodology, pricing, and partnerships
- Contact: https://trusthuman.co.uk/contact — hello@trusthuman.co.uk

## Company

TrustHuman Ltd, a UK limited company.
Contact: hello@trusthuman.co.uk
Website: https://trusthuman.co.uk