Docs

Buyer due diligence

Search documentation

Buyer and due diligence documentation

Materials for CTOs, security reviewers, procurement, and technical due diligence. GovAI documents interfaces and implemented behaviour; your organization operates controls and legal conclusions.

Due diligence checklist

Track procurement review items — click to mark progress locally.

Review technical architecture summaryComponents, data flow, core vs enterprise.
Complete security summaryIsolation, secrets, incident response.
Confirm deployment modelSelf-host, hosted, or hybrid.
Validate OpenAPI contractapi/govai-http-v1.openapi.yaml
Mirror CI gatessubmit-evidence-pack + verify-evidence-pack path.
Read trust center + non-claimstrust-model.md verdict definitions.

Compliance verdict

Summarize prerequisites for VALID — same contract as CI gates.

Preview

GovAI try console

local

Try thisCopy and run in your environment

GET /compliance-summary

Command

curl -sS "$GOVAI_AUDIT_BASE_URL/compliance-summary?run_id=demo-run" \
  -H "Authorization: Bearer $GOVAI_API_KEY"

Expected output

View expected output

{ "verdict": "VALID" | "INVALID" | "BLOCKED", "reasons": […] }

Document	Purpose
Technical architecture summary	Components, data flow, core vs enterprise
Security summary	Threat model pointers, isolation, disclosure
Deployment models	Self-host, hosted, hybrid
Compliance framework mapping	AI Act, SOC 2, ISO 27001 interfaces
Pricing and packaging	OSS, pilot, hosted billing
Frequently asked questions	Common buyer questions

Trust center#

Canonical security and privacy entry: ../trust/trust-center.md.

Product context#

Contact#

Private pilot and enterprise inquiries: hello@govbase.dev (see ../pilot-onboarding.md).