PROCUREMENT / UNDERWRITING / ASSURANCE

Evidence has a scope. Assurance has a boundary.

This center gives buyers, risk teams, insurers, quality leaders, and security reviewers a bounded view of METRAXIOM. It separates public control descriptions from confidential artifacts and identifies what is documented, gated, pending, or not claimed.

PUBLIC ASSURANCE INDEX

Read the status before relying on the statement.

This index points to bounded public descriptions; it is not the governed artifact registry described in the assurance control. “Published” does not mean an independent party has tested the control or that a contractual, regulatory, insurance, or measurement-authority obligation has been accepted.

ASC-PUB-001 · Service and authority boundary

Scope: Public-production evaluation profile and separately held private-workspace architecture

Limitation: Describes the intended control boundary. It is not a laboratory accreditation, certification, regulatory approval, warranty, or fitness determination.

Review Trust Center →

Published boundary
ASC-PUB-002 · Security architecture

Scope: Application controls described for the current public-production evaluation profile and held private surfaces

Limitation: Public descriptions do not establish independent penetration testing, SOC 2 status, government approval, or operation of every control in every deployment.

Review security boundary →

Documented design
ASC-PUB-003 · Privacy, data governance, and subprocessors

Scope: Released public data flows and separately held customer-account architecture

Limitation: The current seller and published notices govern the released public profile. Private-workspace processing, regional commitments, transfer mechanisms, negotiated retention, and DPA terms require separate activation and agreement.

Review data governance →

Current bounded disclosure
ASC-PUB-004 · AI assistance and external AI connections

Scope: Reference discovery, retained-evidence explanation, and customer-authorized external AI paths

Limitation: AI is advisory and cannot supply missing evidence, calculate with authority, approve a source, review a record, or release a measurement result.

Review AI & Data Use →

Independently gated
ASC-PUB-005 · Metrology validation and release authority

Scope: Candidate deterministic calculation and evidence architecture

Limitation: Use of the software does not establish metrological traceability, ISO/IEC 17025 conformity, method validation, or authority to issue a calibration result. Authoritative release remains independently gated.

Review independent gates →

Validation-gated
ASC-PUB-006 · Accessibility posture

Scope: Public and authenticated interface design intentions for the current product

Limitation: No accessibility certification, VPAT/ACR, universal assistive-technology compatibility, or contractual conformance level is implied unless a dated assessment states it.

Review accessibility posture →

Published product posture
NDA-CONTROLLED ASSURANCE ROOM

A confidential review must be conditional, scoped, and access-logged.

An artifact belongs in a controlled review only after its existence, owner, subject entity, product scope, version, environment, evidence date, status, limitations, approval, and disclosure authority have been verified. The Assurance Room is closed in the current release profile; a request does not promise that an artifact exists, that disclosure is authorized, or that access will be approved.

Insurance evidenceCertificates, policy schedules, endorsements, limits, exclusions, named-insured details, and carrier information may be supplied only when actually issued, current, verified, applicable to the proposed contracting entity and service, and authorized for disclosure.
Independent security evidencePenetration-test reports, remediation evidence, audit reports, security questionnaires, and assessment summaries may be shared only when an applicable completed artifact exists and its audience, date, scope, limitations, and redistribution restrictions are verified.
Architecture and resilience evidenceDetailed diagrams, incident-response material, restore-test evidence, business-continuity exercises, and customer-specific RTO/RPO commitments remain controlled. A documented plan is not evidence that an exercise has been completed.
Contract and privacy exhibitsDPAs, security exhibits, transfer terms, service levels, support commitments, and negotiated risk allocation require the correct contracting entity, deployment scope, authorized approvers, and executed agreement.
Validation and quality evidenceGolden-vector reconciliation, independent metrology review, method-specific validation, device-profile evidence, change-control records, and regulated-use evidence may be disclosed only for the exact validated version and scope.
Accessibility assessmentAn ACR, VPAT, or other assessment may be provided only after a competent, dated review exists for the stated product version, environment, criteria, and assistive-technology scope.
Insurance statement

METRAXIOM does not claim to be “fully insured,” insurer-approved, or covered for every loss. Insurance evidence is available only when actually issued and verified. A certificate of insurance is evidence of the stated coverage on its issue date; it is not the policy, does not amend coverage, and does not decide whether a particular claim is covered.

DATA INTAKE BOUNDARY

Start procurement without sending restricted evidence.

The public contact and support paths are approved only for ordinary business contact details, a high-level use case, questionnaire routing instructions, and sanitized issue summaries. Do not send the following data through a public form, ordinary email, AI prompt, or unapproved attachment path.

01

Not approved for public intake

Classified information or classified-system details

02

Not approved for public intake

Controlled Unclassified Information (CUI) or Federal Contract Information (FCI)

03

Not approved for public intake

ITAR-, EAR-, sanctions-, or other export-controlled technical data

04

Not approved for public intake

Protected health information, clinical records, or patient identifiers

05

Not approved for public intake

Payment-card numbers, bank credentials, passwords, private keys, tokens, or secrets

06

Not approved for public intake

Safety-critical, regulated production, or proprietary customer evidence not approved for this intake path

07

Not approved for public intake

Licensed standards, manufacturer manuals, or third-party material the sender lacks rights to disclose

No implied regulated-data authorization.

Marketing references to defense, aerospace, pharmaceutical, GMP, PMEL, or ISO/IEC 17025-aligned workflows do not authorize restricted-data processing. A data class may be submitted only after the applicable contract, deployment, security controls, transfer path, retention rule, and customer approval explicitly permit it. If classification is uncertain, stop and request a sanitized intake route.

SHARED RESPONSIBILITY

Evidence supports a decision. It does not make the decision.

Commercial, security, insurance, validation, and quality acceptance each belong to the party authorized to make that determination.

RESPONSIBILITY 01METRAXIOM SERVICE BOUNDARYMaintain and describe the controls actually operated for the stated service and environment; preserve release gates; correct material inaccuracies; scope evidence to its version and date; and avoid unsupported assurance claims.
RESPONSIBILITY 02CUSTOMER ORGANIZATIONClassify data before submission; control users, endpoints, instruments, methods, source rights, configuration, and connected systems; determine applicable regulatory and quality obligations; and approve reliance within its own quality system.
RESPONSIBILITY 03INDEPENDENT ASSESSOR OR INSURERDefine the assessment or underwriting scope, test the evidence it accepts, state exclusions and reliance limits, and make its own independent determination. METRAXIOM does not speak for an insurer, auditor, accreditation body, or regulator.
RESPONSIBILITY 04BUYER / PROCUREMENT AUTHORITYReconcile the exact entity, service, deployment, data classes, contract, evidence dates, open gaps, customer responsibilities, and intended use before approval. Access to this page is not procurement acceptance.
MEASUREMENT / AI / ACCREDITATION BOUNDARY

Software assistance is not institutional authority.

METRAXIOM is software designed to support controlled measurement workflows and ISO/IEC 17025-aligned technical records. It is not a laboratory, accreditation body, certification body, insurer, auditor, or regulator, and use does not establish accreditation, conformity, regulatory acceptance, insurance coverage, or metrological traceability.

AI output is advisory. Deterministic calculations, controlled source evidence, competent human review, method validation, quality-system authorization, and release gates remain separate. AI cannot cure an incomplete measurand, missing evidence, invalid method, or unauthorized release.

CONTROLLED REQUEST

Ask for the evidence that matches the exact intended use.

Identify the proposed service, deployment environment, intended data classes, regulatory or contractual framework, required artifact, reliance purpose, and due date. Any response must state the requested artifact’s actual status and limitations—not substitute a different document or imply that pending evidence exists.