Question 1

Do we still need a separate AI governance platform?

Accepted Answer

No. chainCheck replaces it. You get the full governance workflow those platforms offer: AI system inventory, shadow-AI discovery, risk assessments, approvals, incident tracking, vendor due diligence, and policy management. The difference is what happens to the record afterward: chainCheck anchors every governance decision to a public blockchain, producing cryptographic, court-verifiable proof that no competitor can offer. You do not need to run both.

Question 2

What does Sentry do, and what is outside its scope?

Accepted Answer

Sentry provides cited, advisory AI security guidance grounded in recognized frameworks through chainCheck's proprietary AI security methodology. It does not perform penetration testing, attack simulation, red-teaming, or automated mitigation, and it does not certify security.

Question 3

How is automatic discovery different from an anchored inventory?

Accepted Answer

Automatic discovery helps surface systems, including shadow AI, but a sensor result is not an organizational attestation. chainCheck uses identity and repository connectors to surface candidates, then requires human confirmation and anchors the resulting inventory record. chainCheck does not claim continuous traffic inspection or detection parity with sensor-based platforms. Detection creates visibility; an anchored, human-confirmed inventory creates independently verifiable evidence. Because no inline sensor or continuous traffic capture is required, chainCheck also avoids adding a runtime component and a new stream of traffic data to security and privacy review.

Question 4

Do records expire?

Accepted Answer

No. Every governance record anchored on Polygon mainnet is permanent. Your subscription gates the dashboard and tooling — not the records themselves. Records remain independently verifiable forever.

Question 5

Can a regulator verify records without a chainCheck account?

Accepted Answer

Yes. Every anchored record produces a public verification URL. Any party can verify independently on Polygon — no account, no API key, no vendor dependency required.

Question 6

What compliance frameworks does chainCheck support?

Accepted Answer

EU AI Act, NIST AI RMF, ISO 42001, SEC AI disclosure guidance, Colorado AI Act, NYC Local Law 144, Texas TRAIGA, California SB 53 and AB 853. Additional frameworks added continuously.

Question 7

How does AI Discovery work?

Accepted Answer

chainCheck connects to your identity providers (Okta, Microsoft Entra ID, and Google Workspace), plus Microsoft 365 and your code repositories (GitHub, GitLab, Bitbucket), and surfaces AI tools employees are using that nobody registered with legal — plus CSV/SSO-export import on every plan. No agent install required. Cloud discovery (AWS, Azure, GCP) is live on Enterprise and Elite. SaaS discovery is live for Salesforce, ServiceNow, Zendesk, HubSpot, Slack, and Workday — all read-only credentials you create and control. Two honest caveats: the Slack connector reads the audit log, which requires Slack Enterprise Grid, and Workday AI-enablement signals come from a report your admin publishes (RaaS) or exports (CSV), because Workday exposes no public API for them.

Question 8

What does the bias-analysis engine compute?

Accepted Answer

From uploaded outcome data, chainCheck deterministically computes four-fifths impact ratios, demographic-parity differences, and statistical-significance annotations. Results can be anchored for independent verification. The engine reports statistical measures; it does not make a legal determination or certify compliance.

Question 9

What is enforcement signaling?

Accepted Answer

chainCheck is the provable source of enforcement intent. Your systems act on it. Every enforcement state change in chainCheck — active, restricted, quarantined, blocked — is a governed decision: made by an authorized role, with a recorded reason, anchored on Polygon, and broadcast to your systems through HMAC-signed webhooks and an authenticated API. Your infrastructure acts on the signal and can independently verify the anchor behind it. chainCheck never holds write access to your identity provider, cloud, or runtime.

Question 10

What is an "entity" for multi-entity pricing?

Accepted Answer

A legally distinct organization requiring its own governed AI registry — a subsidiary, separately regulated business unit, or portfolio company. Each entity gets its own independent governance record and blockchain verification.

Question 11

How does POL payment work?

Accepted Answer

Connect a crypto wallet during signup. Annual plans paid in POL receive 2 months free instead of 1. POL payments settle on Polygon mainnet — the same chain your governance records are anchored to.

Question 12

Do Enterprise and Elite require a contract?

Accepted Answer

Yes. Enterprise and Elite are annual contracts billed via invoice with net-30 payment terms. Pricing is confirmed on your demo call. No credit card required.

Question 13

Why is a smaller vendor a safe choice for governance records?

Accepted Answer

Every governance vendor's records depend on that vendor staying alive — except ours. Anchors live on Polygon, a public network chainCheck does not control. The public verify page runs on public RPCs with no chainCheck server in the loop & the Merkle specification is published, so any auditor can reconstruct a proof with zero access to us. If chainCheck disappeared tomorrow, every record you ever anchored would still verify.

Frequently asked questions