Is this a consulting engagement or a product?
A product. The first 5 pilots receive in-person founder installation; after that, organizations connect a surface and the scoring runs autonomously.
Which regulatory frameworks does certification cover?
Nine US frameworks (Colorado AI Act, White House EO, NIST AI RMF, OMB M-24-10, NYC LL 144, FDA AI/ML, FAA AI, SEC AI Disclosure, FTC AI) plus four international (ISO/IEC 42001, EU AI Act, UK AI Bill, Canada AIDA).
What is the difference between Self-Reported and Audited?
The score is the same. The verification rigor is different. Self-Reported is the buyer signing the data declaration. Audited is a Big-4 firm or accreditation body co-signing the data feed and the assurance. Same FICO analogy: a self-pulled score versus a lender-pulled report.
Can operators see that they are being measured?
Yes. The Specification §7.5 requires disclosure at onboarding. Operators know maintenance interactions exist; they cannot identify which specific interactions are maintenance events. This satisfies regulatory transparency without compromising the measurement.
Does COHESION handle the data, or does it stay in our system?
Behavioral telemetry flows to the COHESION scoring API for computation. Records are stored under your organization account in Cloudflare D1, retained for 24 months, encrypted at rest, GDPR-compliant. You retain ownership.
How long does the first pilot take?
90 minutes for surface integration. Valid JIS after 50 interactions or 10 days. Standard pilot agreement is 60 days.