Who it's for
For five kinds of organisation: a problem they have with AI output today, in the words of an outside source; rules and dates that bear on them in several jurisdictions, in the issuers' own words; and what a verdict record is designed to give them under the standard.
Sectors are named as examples where the source speaks to them.
Insurers
The problem today
Insurers also face challenges in verifying the safety measures implemented by developers for Gen AI, especially in open-source models that can be modified or misused by third parties. Given the dynamic development of the Gen AI risk landscape, insurers may also struggle to verify how businesses manage those risks.
Example sector: financial services and insurance.
Rules and dates that bear on them
-
European Union
AI systems intended to be used for risk assessment and pricing in relation to natural persons in the case of life and health insurance;…
(c) Chapter III, Sections 1, 2, and 3, with the exception of Article 6(5), shall apply from: (i) 2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III; and (ii) 2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I;…
The AI Act lists AI used to assess risk and set prices for life and health insurance as high-risk; as amended in July 2026, its duties for such systems apply from 2 December 2027.
-
European Union
The outcomes of AI systems should also be regularly monitored and, where appropriate, audited, including with the use of fairness and non-discrimination metrics…
The EU's insurance supervisor expects the outcomes of insurers' AI systems to be monitored regularly and, where appropriate, audited.
-
United States
…all Insurers authorized to do business in this state are expected to develop, implement, and maintain a written program (an “AIS Program”) for the responsible use of AI Systems that make, or support decisions related to regulated insurance practices…
In each state that adopts this model bulletin, insurers are expected to keep a written programme for their responsible use of AI systems.
-
Singapore
The MAS Guidelines apply to all financial institutions (FIs) and all forms of AI technologies. They set out MAS' supervisory expectations for FIs to manage risks arising from AI use, while allowing them to tailor their approaches according to their risk profiles, including the scale and nature of their AI use.
These guidelines will take effect on 7 October 2027.
Singapore's guidelines on AI risk management apply to all financial institutions and take effect on 7 October 2027.
What a verdict record is designed to give them
In the standard, a verdict record names the evidence an AI output rested on, the rule it was checked against and who issued it.
It is designed so that an independent party you authorise can rerun the check offline, taking no input from the issuer, so a claim about an AI output can be checked against the evidence it rested on rather than taken on the word of the party that made it.
Against those rules, a verdict record is designed to give an insurer evidence it can have rechecked by an independent party it authorises: what an insured's AI output rested on and the rule it was checked against, rather than the insured's own account.
Regulators and supervisors
The problem today
…monitoring efforts are still at an early stage. The report highlights challenges faced by authorities, including data gaps and lack of standardised taxonomies…
Effective regulation relies on regulators having the right skills, tools, and expertise. While some regulators have been able to put the right expertise in place to address AI, others are less prepared.
Overall, the rapid and widespread adoption of AI implies that there is an urgent need for central banks to raise their game. To address the new challenges, central banks need to upgrade their capabilities both as informed observers of the effects of technological advancements as well as users of the technology itself.
Example sector: financial services and insurance.
Rules and dates that bear on them
-
European Union
For high-risk AI systems placed on the market, put into service, or used by financial institutions regulated by Union financial services law, the market surveillance authority for the purposes of this Regulation shall be the relevant national authority responsible for the financial supervision of those institutions under that legislation…
It shall apply from 2 August 2026.
Under the AI Act, the authority that supervises a financial institution is also the market surveillance authority for the high-risk AI systems that institution places on the market, puts into service or uses; the Act applies from 2 August 2026, with the exceptions its Article 113 sets.
-
United Kingdom
We do not plan to introduce extra regulations for AI.
Source: Financial Conduct Authority, AI and the FCA: our approach, last updated October 2026.
In the UK, the Financial Conduct Authority says it does not plan to introduce extra regulations for AI.
-
Republic of Korea
제1조(시행일) 이 법은 공포 후 1년이 경과한 날부터 시행한다.
법률 제20676호, 2025. 1. 21.
Korea's Framework Act on AI (Act No. 20676, promulgated on 21 January 2025) enters into force one year after its promulgation (unofficial translation).
-
China
本办法自2025年9月1日起施行。
China's measures for labelling AI-generated synthetic content, issued by its internet regulator, apply from 1 September 2025 (unofficial translation).
What a verdict record is designed to give them
In the standard, two checkers that hold the same inputs must reach the same result and name the same step, and no step reads the checker's clock.
By design, a supervisor could have a firm's records of AI output rechecked by an independent party it authorises, from the records and the evidence they cite, without relying on the firm.
Against those rules, a verdict record is designed to give a supervisor records it can have rechecked offline by an independent party it authorises, rather than relying on a firm's own report.
Auditors and assurance firms
The problem today
Assurance providers often struggle to access the information they need to conduct effective assurance of AI systems.
Rules and dates that bear on them
-
European Union
Each Member State shall designate or establish at least one notifying authority responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring.
(a) Chapters I and II shall apply from 2 February 2025; (b) Chapter III Section 4, Chapter V, Chapter VII and Chapter XII and Article 78 shall apply from 2 August 2025, with the exception of Article 101;…
The AI Act has each member state set up an authority to assess, designate and monitor conformity assessment bodies; that part of the Act (Chapter III, Section 4) applies from 2 August 2025.
-
United States: New York City
…it shall be unlawful for an employer or an employment agency to use an automated employment decision tool to screen a candidate or employee for an employment decision unless: 1. Such tool has been the subject of a bias audit conducted no more than one year prior to the use of such tool…
This local law takes effect on January 1, 2023.
Source: New York City Council, Local Law 144 of 2021, section 2, December 2021.
In New York City, an employer may use an automated employment decision tool only if it has had a bias audit in the year before its use; the law took effect on 1 January 2023.
-
United States
The Framework is intended to be voluntary, rights-preserving, non-sector-specific, and use-case agnostic…
The US National Institute of Standards and Technology's AI Risk Management Framework (January 2023) is meant to be voluntary and to apply across sectors and uses.
What a verdict record is designed to give them
By design, a verdict record carries a digest of each evidence item it cites, so an assurance provider you authorise can confirm that the evidence it is shown is the evidence the output rested on.
In the standard, a check shows where a claim came from and whether its evidence holds; it never shows that the claim is true.
Against those rules, a verdict record is designed to give an assurance provider a fixed record to examine: by design, a change made to it afterwards is detectable.
Companies building or deploying AI
The problem today
Among companies, a gap persists between recognizing RAI risks and taking meaningful action.
Source: Stanford Institute for Human-Centered Artificial Intelligence, AI Index Report 2025.
Rules and dates that bear on them
-
European Union
Providers of high-risk AI systems shall: (a) ensure that their high-risk AI systems are compliant with the requirements set out in Section 2;…
Source: European Union, Official Journal, Regulation (EU) 2024/1689 (AI Act), Article 16, July 2024.
(c) Chapter III, Sections 1, 2, and 3, with the exception of Article 6(5), shall apply from: (i) 2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III; and (ii) 2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I;…
Providers of high-risk AI systems must make them meet the AI Act's requirements; as amended in July 2026, those duties apply from 2 December 2027 for the systems in Annex III and from 2 August 2028 for those in Annex I.
-
European Union
Providers shall ensure that AI systems intended to interact directly with natural persons are designed and developed in such a way that the natural persons concerned are informed that they are interacting with an AI system…
It shall apply from 2 August 2026.
Providers must design AI systems that interact with people so that those people are told they are dealing with an AI system; the Act applies from 2 August 2026.
-
United States: Texas
This Act takes effect January 1, 2026.
A defendant in an action under this section may not be found liable if: (1) another person uses the artificial intelligence system affiliated with the defendant in a manner prohibited by this chapter; or (2) the defendant discovers a violation of this chapter through: (A) feedback from a developer, deployer, or other person who believes a violation has occurred; (B) testing, including adversarial testing or red-team testing;…
Texas's AI governance act takes effect on 1 January 2026; under it, a defendant is not found liable for a violation it discovers through testing, including red-team testing, among the other routes it lists.
-
Republic of Korea
인공지능사업자는 고영향 인공지능이나 생성형 인공지능을 이용한 제품 또는 서비스를 제공하려는 경우 제품 또는 서비스가 해당 인공지능에 기반하여 운용된다는 사실을 이용자에게 사전에 고지하여야 한다.
제1조(시행일) 이 법은 공포 후 1년이 경과한 날부터 시행한다.
법률 제20676호, 2025. 1. 21.
Korea's Framework Act on AI requires a business that offers a product or service using high-impact or generative AI to tell its users beforehand that it runs on AI; the Act enters into force one year after its promulgation on 21 January 2025 (unofficial translation).
-
China
本办法自2025年9月1日起施行。
China's measures for labelling AI-generated synthetic content apply from 1 September 2025 (unofficial translation).
-
Japan
人工知能関連技術を活用した製品又はサービスの開発又は提供をしようとする者その他の人工知能関連技術を事業活動において活用しようとする者(以下「活用事業者」という。)は、基本理念にのっとり、自ら積極的な人工知能関連技術の活用により事業活動の効率化及び高度化並びに新産業の創出に努めるとともに、第四条の規定に基づき国が実施する施策及び第五条の規定に基づき地方公共団体が実施する施策に協力しなければならない。
Japan's AI Promotion Act asks businesses that develop, provide or use AI-related technology to use it actively and to cooperate with national and local measures (unofficial translation).
-
International: G7
…will provide voluntary guidance for actions by organizations developing the most advanced AI systems…
The G7's Hiroshima code of conduct (October 2023) gives voluntary guidance to organisations developing the most advanced AI systems.
What a verdict record is designed to give them
By design, a receipt is sealed with each output, recording the evidence it rested on, the rule it was checked against and who issued it.
The standard is designed so that the check is deterministic: rerun later on the same inputs, it reaches the same result.
Against those rules, a verdict record is designed to give a provider or deployer a record of each AI output, the evidence it rested on and the rule applied, that a party it authorises can recheck later.
Enterprise buyers
The problem today
Local government is sometimes not equipped to assess the claims that are made by vendors, meaning they cannot prepare future mitigations that might be necessary for the tools they procure.
Example sector: public sector.
Rules and dates that bear on them
-
European Union
Deployers of high-risk AI systems shall take appropriate technical and organisational measures to ensure they use such systems in accordance with the instructions for use accompanying the systems, pursuant to paragraphs 3 and 6.
(c) Chapter III, Sections 1, 2, and 3, with the exception of Article 6(5), shall apply from: (i) 2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III; and (ii) 2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I;…
Deployers of high-risk AI systems must use them according to their instructions for use; as amended in July 2026, those duties apply from 2 December 2027 for the systems in Annex III.
-
European Union
Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf…
(a) Chapters I and II shall apply from 2 February 2025; (b) Chapter III Section 4, Chapter V, Chapter VII and Chapter XII and Article 78 shall apply from 2 August 2025, with the exception of Article 101;…
Providers and deployers must support AI literacy among the staff who operate and use their AI systems; Chapter I of the Act, where this duty sits, applies from 2 February 2025.
-
United States: Colorado
ON AND AFTER JANUARY 1, 2027, A DEVELOPER SHALL MAKE AVAILABLE TO EACH DEPLOYER OF A COVERED ADMT DEVELOPED BY THE DEVELOPER, IN A FORM AND MANNER THAT IS REASONABLY UNDERSTANDABLE TO A DEPLOYER AND THAT PROTECTS TRADE SECRETS OR INFORMATION PROTECTED FROM DISCLOSURE BY STATE OR FEDERAL LAW: (a) A GENERAL STATEMENT DESCRIBING THE INTENDED USES AND KNOWN HARMFUL OR INAPPROPRIATE USES OF THE COVERED ADMT;…
Under Colorado's re-enacted law on automated decision-making technology, from 1 January 2027 a developer must give each deployer of a covered technology it developed a statement of its intended uses and of its known harmful or inappropriate uses, among other things.
-
International: OECD
…the Recommendation was revised by the OECD Council meeting at Ministerial level on 3 May 2024…
The OECD's Recommendation on AI was revised by its Council at ministerial level on 3 May 2024.
What a verdict record is designed to give them
The standard is designed so that no step of a check takes its inputs from the issuer.
A buyer could therefore have a vendor's records of AI output rechecked by an independent party it authorises, without relying on the vendor's own account, by design.
Against those rules, a verdict record is designed to give a buyer a way to have a vendor's claims about its AI's output checked against the evidence by an independent party it authorises.
This page is not legal advice.
The rules above are quoted from the issuers' own texts, read on 10 November 2026; a date is evidence about the law, not about any organisation's readiness.
Nothing on this page says that using a verdict record, or Sencor AI, meets any of these obligations: whether anything meets a rule is for that rule and its supervisor.