Public experience
181 mapped capabilities, eight product walkthroughs, source-labeled prices and forms that do not activate billing.
TRUSTAION TRUST CENTER · PUBLIC EDITION 2026
Trust you can review—not just a promise.
A public, honest view of how AION presents security, privacy, AI, continuity and procurement readiness. Implemented controls are separated from customer- and country-specific validation.
An evidence register for informed buying.
Every statement uses one of three states: public experience, scope to validate and claims AION does not make.
AION Agent
Uses approved commercial sources, blocks sensitive actions, rate-limits requests and falls back safely without external AI.
Commercial data
A request stores submitted fields, selected configuration and consent so AION can respond to the opportunity.
Customer architecture
Identity, isolation, encryption, retention, residency, backup, monitoring and testing are confirmed for the integration.
Operational service
SLA, support, RTO/RPO, schedules, escalation, continuity and responsibilities belong in offer and contract.
Certifications
This edition does not claim ISO 27001, SOC 2, PCI DSS, FedRAMP or another certification without published evidence.
The AION Agent supports decisions. It does not take physical control.
The public model follows a discipline inspired by AI risk governance: govern, map, measure and manage. This is not a claim of NIST certification.
Govern
Approved sources, safety instructions, explicit scope and human accountability.
Map
Connect the question to catalog, modules, plans and relevant conditions without browsing private data.
Measure
Bounded size, rate, history and output reduce abuse and exposure.
Manage
Emergency, secret or device-control requests receive a safe response and human path.
What happens when someone uses AION Market.
- 01
Explore
The catalog, guides and assessment can be used without creating an account.
- 02
Conversation
Question text, limited history and retrieved commercial context go to the AI provider with response storage disabled. Catalog mode remains available if it fails.
- 03
Quote
Contact, company, country, segment, timeline, notes, consent and commercial selection are recorded to respond and validate scope.
- 04
Rights
Access, correction or deletion requests use the published channel. Retention, location, processors and transfers are specified in the applicable notice and contract.
Questions every enterprise purchase must close.
Identity & access
Roles, least privilege, authentication, joiner/mover/leaver, sessions and administrative separation.
VALIDATE →Application & API
Input validation, limits, origins, error handling, secrets and dependencies.
VALIDATE →Data & privacy
Purpose, minimization, encryption, retention, location, deletion and authorized access.
VALIDATE →Infrastructure
Environments, availability, backups, restoration, logging, patches and continuity.
VALIDATE →Human operations
Shifts, escalation, dual control, evidence, training and incident response.
VALIDATE →Third parties
Processors, cloud, AI, telecom, hardware, support and exit obligations.
VALIDATE →One global foundation. Five local conversations.
Colombia
Data protection, video surveillance, biometrics, contracts, tax and local operation.
LOCAL REVIEW REQUIREDLatin America
Country law and consent, currency, invoicing, support and data transfers.
LOCAL REVIEW REQUIREDUnited States
State and sector requirements, privacy, biometrics, accessibility, insurance and terms.
LOCAL REVIEW REQUIREDEuropean Union
GDPR, AI Act where applicable, controller roles, transfers, accessibility and residency.
LOCAL REVIEW REQUIREDBrazil
LGPD, legal basis, processors, rights, currency, tax and Portuguese support.
LOCAL REVIEW REQUIREDAccessible and resilient experience
The interface includes keyboard navigation, labels, visible focus, semantics, contrast and reduced motion. It is designed using WCAG 2.2 practices; it does not claim formal conformance without a published independent audit.
WCAG 2.2 ↗Continuity must be written down
Availability, maintenance windows, support, escalation, backup, restoration, RTO, RPO, degraded mode and data exit must become measurable commitments in the offer and contract.
NIST CSF ↗Bring this register into procurement.
Request a technical session and a trust package tailored to your industry, country, integration and operating model. The request does not activate billing.