PENSO assessment and certification are technical evaluations of AI governance practices.
PENSO certification is not a legal compliance certification and should not be treated as equivalent to frameworks such as SOC 2 or ISO certification.
PENSO does not guarantee regulatory compliance in any jurisdiction or under any specific legal regime.
Assessments are based on automated scanning and LLM-assisted evaluation performed at a specific point in time.
Organizations should consult qualified legal counsel for legal and regulatory compliance requirements.
Source code is never transmitted to PENSO servers. Only file hashes and assessment metadata are processed.