ATO Readiness Baseline
Fixed-scope evidence assessment for one defined AI system and one review context.
Everything required to evaluate, approve, and initiate the Baseline.
One controlled buyer-access center for commercial scope, assurance method, security and privacy boundaries, internal approval materials, and current capability limitations.
Read what AGICOMPLY establishes — and what it does notPublicAvailable during intakeNot currently offered
COMMERCIAL REVIEW TRACK
Commercial
What is being purchased, what it costs, what is included, and what the customer must supply.
Evaluation materialPrimary reviewerAvailabilityReview path
Procurement · Executive sponsorPublic
Engagement price and licensing position
$3,500 fixed scope. No annual license is required for the Baseline engagement.
Five deliverables
Evidence Inventory, Mapping Summary, Gap Register, Ordered Remediation Plan, and Chain-of-Custody Statement.
Customer-specific statement of work
Defined system, review context, supplied-evidence boundary, delivery assumptions, and acceptance terms.
Defined through intake
Customer start plan
Confirmed inputs, responsible owners, written clarification route, and agreed assessment start date.
Defined through intake
ASSURANCE REVIEW TRACK
Assurance
How supplied evidence is inventoried, mapped, examined, bounded, and preserved for later review.
Evaluation materialPrimary reviewerAvailabilityReview path
Interactive Evidence Review Room
Five illustrative Baseline deliverables with browser-side SHA-256 artifact verification.
Illustrative reviewer package
Fictional evidence package showing inventory, mappings, gaps, remediation, and chain of custody.
Assessment methodology
Controlled evidence workflow with human verification of candidate evidence relationships.
AGICOMPLY Evidence Standard v1.0
Minimum record fields for reviewer-readable AI evidence and a downloadable evidence template.
Independent certification or attestation
AGICOMPLY does not issue certifications, legal compliance determinations, or authorizations to operate.
Defined through intake
Continuous control monitoring
The Baseline is a point-in-time engagement and does not represent continuous operating assurance.
Defined through intake
SECURITY & PRIVACY REVIEW TRACK
Security & Privacy
Public statements covering the service boundary, implemented security controls, privacy notices, and current limitations.
Evaluation materialPrimary reviewerAvailabilityReview path
Security statement
Implemented authentication, rate limiting, PDF signature validation, evidence hashing, and database-enforced tenant segregation.
Privacy policy
Public notice describing information handling and data-subject contact routes.
Subprocessor register
Public record of supporting service providers used by the marketing and application environment.
Terms of service
Public service terms and engagement limitations.
Customer-specific evidence handling terms
Final scope, retention expectations, deletion responsibilities, and approved evidence-transfer method.
Defined through intake
Automated evidence-retention enforcement
Automated retention periods, expiry tracking, and deletion workflow are not represented as currently implemented.
Defined through intake
FedRAMP authorization service
AGICOMPLY produces evidence packages used in review contexts; it does not issue or guarantee FedRAMP authorization.
Defined through intake
INTERNAL APPROVAL REVIEW TRACK
Internal Approval
Materials an internal champion can circulate to procurement, security, legal, governance, and leadership.
Evaluation materialPrimary reviewerAvailabilityReview path
Procurement Decision Room
Role-specific decision language for Procurement, Security/ATO, Legal/Privacy, AI Governance, Executive Sponsor, and Consulting Partner.
Internal Approval Brief Generator
Browser-only generator for a printable, downloadable, role-specific purchase request.
Procurement Evaluation Packet v1.0
Versioned evaluation packet covering the offer, workflow, security boundary, limitations, and next action.
Guided Review Mode
A structured route through the evidence demonstration, assessment boundary, decision brief, and intake.
Customer-specific intake confirmation
Written confirmation of the defined system, review context, customer owner, and supplied-evidence boundary.
Defined through intake
ASSURANCE BOUNDARY
Transparency includes what is not offered.
The Vault separates public evaluation materials, customer-specific intake materials, and capabilities that AGICOMPLY does not currently represent. This prevents a buyer from mistaking a point-in-time evidence assessment for certification, continuous assurance, legal advice, or an authorization decision.