> For the complete documentation index, see [llms.txt](https://docs.ruler.nl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ruler.nl/about-ruler/trust-and-compliance.md).

# Trust and compliance

Assurance reports and certifications for Ruler B.V. and CERRIX B.V.

Ruler is used by financial institutions that are themselves under supervision, so the assurance behind the platform matters as much as the platform itself. This page lists what is available.

## Assurance and certifications

| Entity      | Assurance                        | Status                                      |
| ----------- | -------------------------------- | ------------------------------------------- |
| Ruler B.V.  | SOC 2 Type II report             | Available                                   |
| CERRIX B.V. | ISO/IEC 27001:2022 certification | Certified                                   |
| CERRIX B.V. | ISAE 3402 Type II report         | Available; being converted to SOC 2 Type II |

Ruler B.V. is part of CERRIX. CERRIX's security policies, certifications, privacy documentation and sub-processor list are published on the [CERRIX Trust & Compliance](https://docs.cerrix.com/about-cerrix/trust-and-compliance) pages.

## Change management

Changes to Ruler follow a formal change management process: change request, review, acceptance testing and formal approval before release to production. This process is part of the SOC 2 control framework of Ruler B.V. Functional changes are communicated through the [release notes](/help/release-notes.md) and release communication to customers.

## AI governance

Ruler has no AI functionality in production today. The governance framework that applies to AI functionality in development is described on [AI at Ruler](/about-ruler/ai.md).

## Content quality

The controls that safeguard the completeness and accuracy of the regulatory content in Ruler, including the quarterly completeness check against SLA commitments, are described in [How Ruler's content is produced](/about-ruler/editorial-process.md).

## Requesting documents

Assurance reports are available on request through your Ruler contact.