RedHub AI
How the gate works
How the Vendor ISO-42001 Procurement Evidence Scrutiny gate works
This tool grades a vendor's claimed ISO/IEC 42001 conformity evidence against six controls before you rely on it. Each signal is scored 0–2; the verdict is the weakest one — then a gate that can only make it worse.
The 6 signals
Two of the six are gate controls: whether the certificate's accreditation is confirmed, and whether its scope covers the system you are buying. If BOTH are below full at the same time the vendor is REJECTED no matter how strong the other four controls are — you can confirm neither that the certificate is real nor that it covers your system, and evidence you cannot confirm on either axis is not evidence. Confirm either axis in writing and the gate releases.
Why: Beacon Analytics carries four full controls — an accredited body, a current certificate, an audit report, and governed sub-processors — and a 1.67 mean, so the weakest control is only a 1, which alone would read VERIFY FIRST. But both gate controls sit at 1 at once: accreditation is unconfirmed and scope coverage is unconfirmed. With neither axis verifiable, the gate forces REJECTED regardless of the four strong controls — the same vendor rises to VERIFY FIRST the moment it confirms scope.
A clean sheet didn’t save it. The verdict is the weakest signal — and a top trigger is dispositive on its own — so it names the one thing to fix first. Grades the procurement evidence you assemble, offline — not an audit, a certification, a conformity assessment, or legal advice. It scores evidence, never people; confirm any certificate on the issuing body's public register.