Source AI — demonstrationTrust CentreRequest evidence

Data protection

Published policies and statements

Security policy

Reviewed policy summary.

Required controlCurrentLast reviewed Review by

Architecture

Reviewed public summary.

ArchitectureThree stacked trust boundaries with the published systems in each, and the data flows between them. Customer / RGP: no published systems. Source-managed: Source service. External provider: no published systems. No data flows are published. The same information is listed in full below this diagram.CUSTOMER / RGPNo published systemsSOURCE-MANAGEDEXTERNAL PROVIDERNo published systemsSource service

Source-managed

Source service

Approved service boundary.

Data flows and safeguards

No data flows are published in this architecture view.

Last reviewed

Further information

Required controlCurrentLast reviewed Review by