Certification
Certification Model
Continuum/AI certification is granted for a defined scope rather than an entire organization. Scopes are characterized by environment boundaries, agent inventory, data classification, and integration points.
Scope definition
Environment boundaries define the systems, networks, and data stores included in certification scope. Agent inventory lists specific agents operating within the scope. Data classification establishes the maximum sensitivity of data accessible within scope. Integration points identify external systems accessed by agents.
Profile selection
Four certification profiles address different risk levels.
| Profile | Data Accessed | Controls Required | Validation Method |
|---|---|---|---|
| Essential | Public, internal | 9 | Self-assessment |
| Standard | Confidential | 24 | Self-assessment with automated scan |
| Elevated | PII, sensitive | 39 | Internal audit |
| Critical | Regulated, financial | 48 | Independent third-party audit |
Certification statement
Certified scopes shall be described in the following format: Continuum/AI Certified, Scope description, Profile level, Valid dates, and Certificate ID.
Validity periods
All profiles have 12-month validity periods. Reassessment requirements vary by profile from self-assessment for Essential to third-party audit for Critical.