RedHub AI
How the gate works
How the AI Vendor Security Posture Scrutiny gate works
This tool grades an AI vendor's security posture against six controls before you sign. It scores 6 weighted controls into a 0–100 number — then a gate that can only make the verdict worse.
The 6 weighted controls
Two controls are disqualifiers, not just weighted inputs: a written won't-train-on-your-data commitment and a working deletion-and-exit clause. Either one scoring 0 (Absent) forces RED FLAG regardless of the weighted score - get it in writing to release the gate.
Why: Six controls score 80/100 - SOLID on the weighted math, with a current SOC 2, encryption, a breach SLA, subprocessor transparency, and a working exit clause. But the vendor has no written commitment to not train on your data - that control scored 0 (Absent). The disqualifier gate forces RED FLAG regardless of the 80 score; a vendor that trains on your data is a different risk than one that is merely thin on paperwork.
A high score didn’t save it. The score is context; the gate is the answer — and it names the one thing to fix first. Scores the vendor evidence you enter, offline. Not a security audit, legal review, or a substitute for your own contract counsel.