---
title: "AI Trust Pack: pass the AI section of a security review"
description: "A two-week engagement that assembles the trust page, questionnaire answer bank, AI-BOM, data-flow map and incident plan an enterprise security review asks an AI..."
source: "https://www.kensink.com/engagements/ai-trust-pack/"
canonical: "https://www.kensink.com/engagements/ai-trust-pack/"
---
SERVICE · AI TRUST PACK · FIXED SCOPE

# Unblock the deal that procurement is holding.

Enterprise vendor questionnaires now carry thirty to eighty AI-specific questions, and SOC 2 alone fails that section. We assemble the answers once, tie each one to real evidence, and publish a trust page that a procurement team, or the agent they send, can actually read.

Who it's for: Founders with a contract sitting in a security review, usually about three weeks before the rep promised close.

THE OFFER

Outcome

The deal moves not hours billed

Engagement

Fixed scope

Timeline

2 weeks

Investment

from $6,500 \+ optional care retainer

Handoff

Published page + answer bank

[Request this service →](https://www.kensink.com/contact) [Book a scoping call](https://www.kensink.com/contact)

IN SCOPE

## What the engagement covers.

-   ✓A published trust page, structured and machine-readable
-   ✓An answer bank covering the standard 30 to 80 AI questionnaire items, each tied to evidence
-   ✓A model and data-flow map: what leaves your boundary, to which provider, under what terms
-   ✓An AI bill of materials covering every model, service, SDK, vector store and MCP server
-   ✓Subprocessor list and a DPA template
-   ✓A one-page AI incident response plan with names
-   ✓A written EU AI Act Article 50 position

OUT OF SCOPE

## What we would quote separately.

-   –The SOC 2 audit itself
-   –Legal sign-off or counsel
-   –Certification of any kind
-   –Remediating the gaps the pack surfaces

DELIVERABLES

## What lands at handoff.

-   ✓The trust page, live and machine-readable
-   ✓The questionnaire answer bank, with evidence links
-   ✓The AI-BOM and the data-flow map
-   ✓DPA template, subprocessor list, incident plan
-   ✓A walkthrough so your sales team answers the next one without us

TIMELINE · 2 PHASES

## 2 weeks, problem to production.

1.  01
    
    Week 1
    
    ### Gather and map
    
    Inventory the stack, trace the data flows, and collect the evidence that already exists.
    
2.  02
    
    Week 2
    
    ### Write and publish
    
    Write the answers, publish the page, and pair with your sales team on the next questionnaire.
    

SERVICE LEVELS

## The SLA this service runs under.

During the build and through the warranty window after handoff. This engagement defaults to Standard.

| Commitment | Standard | Priority |
| --- | --- | --- |
| First response | Next business day | Within 4 business hours |
| Critical issue triage | 1 business day | 2 hours |
| Production uptime target | 99.5% | 99.9% |
| Support hours | Mon to Fri, business hours | Extended, plus weekend on-call |
| Change requests / month | 2 included | Unlimited within retainer |
| Post-launch warranty | 30 days | 90 days |
| Named delivery lead | Shared | Dedicated |

ⓘ Standard ships with every fixed-scope build. Priority comes with a care retainer. Pricing is a starting range; final terms are set in the statement of work.

[Read the full AI Trust Pack capability page ↗](https://www.kensink.com/ai-security)

READY WHEN YOU ARE

## Bring one real problem.  
We'll bring the spec.

[Request this service →](https://www.kensink.com/contact) [All engagements](https://www.kensink.com/engagements)

[← All engagements](https://www.kensink.com/engagements) ENGAGEMENT · AI-TRUST-PACK