CSAIChaptersEventsBlog
Join Anthropic, AWS, Google Cloud, Microsoft, SANS, and more this August at the SANS Cloud Security Exchange Summit →

STAR Registry Listing for

Ansvar AI

Ansvar AI

Ansvar Gateway is a hosted MCP (Model Context Protocol) gateway that gives AI agents cited access to laws, regulations, and standards. Customers connect the AI assistant they already use — Claude, Microsoft Copilot, ChatGPT, or any MCP-capable client — to gateway.ansvar.eu/mcp over streamable HTTP with OAuth 2.1 (Dynamic Client Registration), and query 46 live jurisdictions: 330,000+ national laws plus EU regulations (GDPR, NIS2, DORA, CRA, AI Act and others) and technical standards. Every answer carries paragraph-level citations to the official publisher. Built-in compliance workflows produce audit-ready, citation-backed output for threat modeling (STRIDE/LINDDUN, TARA), DPIA, and gap analysis.

Service boundary and security: the production platform runs on Kubernetes (Hetzner, Finland — EU-hosted end to end) and comprises the gateway, the corpus-serving fleet, the identity plane (Keycloak), and the audit-ledger plane. The corpus fleet stores no customer data; the customer document plane is tenant-scoped with deletion support. The service is fail-closed by design: an unavailable source returns an explicit error, never an uncited answer, and licensing-withheld content is flagged rather than silently dropped. Data is encrypted in transit (TLS 1.2+) and at rest (verified). Every served corpus passes a source-licensing audit before go-live.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Ansvar AI
Listed Since: 07/23/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.0.3

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed 4 days ago, on July 23, 2026.