Trust and evidence, what we can actually show you

Proof, not promises

This page is the evidence behind the product. Everything below is either a fact about the operating entity, a documented mapping, or a mechanism you can inspect. Where something is a readiness position rather than a certification, it says so.

Registered DIFC entity

regulation10.ae is operated by Exec X AI Ltd, DIFC commercial licence 10474, registered in the Dubai International Financial Centre.

Built to DIFC Regulation 10

regulation10.ae implements Regulation 10 of the DIFC Data Protection Regulations together with the DIFC Data Protection Law No. 5 of 2020: it registers each AI system, runs the checks, and keeps the proof the Commissioner can require. The controls mapping is maintained in the product and available for review under NDA.

ISO/IEC 42001 crosswalk, readiness and not certification

The platform's AI management-system controls are mapped to ISO/IEC 42001:2023. This is a documented crosswalk and internal readiness assessment. It is not a certification, and no certification is claimed. Only an Accredited Certification Body can certify. The crosswalk is available for review under NDA.

Tamper-evident, evidence-grade audit trail

Every regulated action is written to a hash-chained audit log with per-tenant chain heads and independently stored, signed checkpoints, so a later edit or truncation is detectable. The public interactive demo already produces an evidence register with a SHA-256 proof-of-record for each artefact it generates.

How we stop our own claims drifting

Every external claim we make is registered with the surfaces it appears on and a probe that reads the running code. A probe that cannot establish a claim returns unknown, never true. A claim a probe refutes comes off the site.

That registry is a live mechanism inside the platform rather than a document. It reads the running deployment, so it can only answer honestly for the process it is running in, and it is published to signed-in customers rather than reproduced here where it would be a stale copy of itself.

Governed AI, transparently disclosed

Every AI model call the platform makes runs through a guarded provider with guardrails, a canary check, and tenant-attributed audit rows. Each registered system gets a plain-language transparency notice generated by the deterministic engines. The AI-governance policy is published to customers.

Customer references

We have no published customer references yet, and we will not invent one. When a customer agrees to be named, they will appear here with their permission and not before.

What this page is not

It is not a certificate, an audit opinion, or a legal determination. It is the set of things we can evidence on request. Where you need certification, that is an Accredited Certification Body's role, and this platform produces the evidence pack you would take to one.