A determination that can be bought is worth nothing.
Every certification body is paid by the organizations it judges. That is the structural problem at the centre of this industry, and no amount of good intention resolves it. This page sets out the rules SCL operates under, the conflicts it has not yet resolved, and how to report one you think it has missed.
The problem, stated plainly
The client pays for the assessment, and the client wants to pass. The body that decides whether they passed is the same body that would like to be paid again next year. Everyone in conformity assessment operates inside this, and a body that pretends otherwise is the one to be careful of.
It is managed structurally or not at all. The controls below exist so that the answer to "would SCL have reached a different conclusion if more money were on the table" does not depend on anyone's character.
What SCL does not do
SCL is a certification authority. It is not a consultancy, and this is a structural commitment rather than a positioning statement.
- SCL does not consult on how to remediate a finding. A finding states what the requirement demands, what is missing, and what a compliant state would look like in concrete terms. It stops there. It does not prescribe an implementation, recommend a design, or express a preference for a vendor, tool or approach. The line is acceptance criteria for closure, never how to build it.
- SCL does not design, build, train, tune or operate the systems it assesses.
- SCL does not sell a route to a pass. There is no service that improves the odds of certification, and there is no fee that shortens an assessment.
SCL does offer a Readiness Assessment, which identifies gaps against the framework before a certification assessment is attempted. It produces no certificate and no determination. Its fee is not credited toward a certification fee, so there is no bundle and no incentive to route clients through it. Remediating what it finds is the client's own responsibility.
Financial independence
- No assessor may hold equity, options, or any ownership interest in a client being assessed
- No assessor may receive compensation from a client other than through the SCL engagement
- No assessor may have received compensation from the client in the 24 months before the assessment, except through a prior SCL engagement
- Fees are paid to SCL, not to individual assessors, and assessor compensation does not vary with the certification outcome. Nobody involved in reaching a determination is paid more for reaching one answer than the other.
Professional and personal independence
- No assessor may have been employed by the client in the 24 months before the assessment
- No assessor may have provided consulting services to the client on the system being assessed
- No assessor may have a personal relationship with client personnel that could create the appearance of bias, including family, close friends, and former business partners
- No assessor may sit on the advisory board of a client while conducting assessments of that client
Where SCL has conducted a Readiness Assessment for a client, a different Lead Assessor must be assigned to the subsequent certification assessment, and the readiness engagement must have been completed and closed first. See section 08 for what this constraint means at SCL's current size.
Intellectual independence
The two requirements here are less common to publish, and they matter more than the financial ones in practice.
No predetermined opinion. An assessor who has publicly stated views about a specific client's system that could create the appearance of prejudgment must recuse themselves. This cuts both ways: an assessor who has publicly praised a system is as disqualified as one who has publicly criticized it.
Willingness to issue adverse findings. An assessor must be willing to issue findings the client will not like. An assessor who communicates reluctance to issue adverse findings is not qualified to conduct the assessment. Not reprimanded, not retrained: not qualified.
The check before every engagement
Before every assessment, every member of the team completes a conflict of interest disclosure covering any financial, employment, consulting, advisory or personal relationship with the client, and any other circumstance that could create the appearance of bias. The disclosures are reviewed before the assessment begins.
If a conflict or potential conflict is found, the assessor is replaced.
If no conflict-free team can be assembled, the engagement is declined. That is the operative sentence on this page. A rule that never costs anything is not a control, and this one is written to cost revenue when it has to.
Assessment decisions and commercial decisions
A determination is issued for every completed assessment, including Not Certified. The Certification Determination Document is the deliverable, and the client receives it whatever it says. A client who does not certify has received what they paid for.
Fees are set by classification tier and scope, agreed before the assessment begins, and do not change based on the outcome. There is no success fee, no contingent element, and no discount for a favourable result.
Any client may challenge a determination through the appeals process at /complaints, at no cost, within 60 calendar days. Anyone at all may complain about SCL's conduct or about a certificate SCL has issued, through the same route.
What SCL has not resolved: one assessor
SCL currently operates with one qualified assessor, who is also the SCL Principal. This is a real limitation on independence and it is stated here rather than left to be discovered.
What does operate, and compensates in part:
- Every independence requirement in sections 03 to 06 applies in full, including declining engagements that cannot be staffed conflict-free
- An appeal against an assessment the Principal conducted requires the concurrence of an external member. The Principal may take part in deliberation but cannot decide such an appeal alone
- A complaint concerning the Principal is investigated by an external advisor, not by SCL
- Determinations are issued regardless of outcome, and no fee varies with the result
- Because a different Lead Assessor is required for a certification following a Readiness Assessment, SCL will not certify a system it conducted a readiness assessment on until a second qualified assessor is engaged. This forecloses revenue rather than bending the rule
What changes this. Dual independent review begins when a second qualified assessor is engaged. It is a precondition for accreditation, not an optional maturity step, and SCL treats it that way.
What SCL has not resolved: it wrote the standard
SCL publishes the AI Requirements Framework and certifies against it. Most conformity assessment separates these: a standards body writes the standard, and independent certification bodies assess against it. ISO, for instance, does not certify against its own standards at all. SCL does both.
The objection is legitimate and worth stating in its strongest form: a body that writes the rules and also grades the exam can move either one to suit itself. It could soften a requirement that a paying client cannot meet, or sharpen one to create demand for an assessment.
What constrains this:
- The standard is published openly and free. It is released under Creative Commons Attribution ShareAlike 4.0 and deposited at a permanent DOI. It is not paywalled, not licensed per seat, and not withheld from anyone, including SCL's competitors.
- Every requirement is public. All of them are readable at /requirements without contacting SCL. A requirement cannot be quietly softened in a document nobody can see.
- Anyone may assess against it. The licence permits any party to apply the framework, teach it, build on it, or conduct their own assessments against it. SCL does not hold exclusive rights to use its own standard.
- Every version is permanent and citable. Versions are deposited separately and do not overwrite each other. A certificate names the specific framework version it was issued against, so the basis of an issued certificate cannot be moved afterwards.
- Changes are published with their rationale at /updates, so a requirement that changes does so in public and on the record.
What this does not do. None of it eliminates the conflict. It makes the conflict observable, which is a weaker claim and the honest one. A reader who distrusts the arrangement can read every requirement, compare versions, and reach their own conclusion without SCL's cooperation.
What would resolve it is external accreditation, under which an independent body assesses SCL itself against ISO/IEC 17065, including its impartiality controls. SCL is not accredited and says so at /accreditation.
What SCL publishes about other people
SCL runs public pages that can carry material it did not write. Two rules govern them. Both are structural rather than a matter of anyone's taste, because a rule about editorial judgement that depends on editorial judgement is not a control.
The source rule: the publisher must sell no AI product or service. That admits regulators and standards developers, whose instruments change what conformity requires, and research institutions with nothing to sell. Today the list is the Federal Register, EUR-Lex, NIST, the NIST Computer Security Resource Center drafts open for comment, MIT News, the Allen Institute for AI, and NASA, whose procedural requirements NPR 7150.2D and NPR 8000.4C Ask SCL quotes. That is the whole list. It is published here rather than only in the code, and anything added to it is added to this page on the same day.
The rule excludes every commercial AI vendor, and it excludes general technology press. The vendors are excluded because they sit inside SCL's own prospect universe: a body that certifies AI systems should not publish about the products of companies it may one day assess, whether the coverage flatters them or damages them. The press is excluded because SCL cannot control its tone, and republishing a headline puts SCL's name beside a judgement SCL did not make.
The purpose rule: an item must bear on how AI is regulated, governed, certified or assured, in any field. Nothing appears because it is newsworthy. Funding rounds, valuations, lawsuits, acquisitions, executive appointments, partnerships, prizes and campaign coverage are dropped whoever published them. This rule is wider than the one in section 02, which governs what a finding may contain. This one covers everything SCL publishes anywhere, including pages that have nothing to do with an assessment.
The purpose rule is the half that does the work, and it is worth being honest about why it is needed. A source that passes the first test still publishes plenty that fails the second: a university news feed carries appointments, prizes and fundraising alongside its research. Measured across all six sources on 11 September 2026, fourteen of the one hundred and fifteen items they had published that fortnight passed both tests.
A disclosure that follows from the source rule. Ask SCL, the assistant on this site, runs on an open weight Llama 3.1 model that SCL fine tuned and runs on its own hardware. That is a dependency on a model released by Meta. The Llama 3.1 Community License requires the Built with Llama attribution shown on the Ask SCL page. SCL has no commercial relationship with Meta, receives nothing from Meta, and would assess a Meta system under the same requirements as anyone else's. Because SCL depends on one vendor's weights, it takes no published position on any vendor, that one included. Silence applied evenly is the only version of this a reader can check without taking SCL's word for anything.
What this replaced. Until September 2026 the news page carried a hand written list of research posts from named AI labs, and the homepage carried six hand picked links with a commercial lab in the top row. Four of the fourteen hand written entries were one lab's work and none were its nearest competitor's, for the ordinary reason that the list was assembled by one person out of what he had been reading. The same page ran two live model catalogues, which ranked commercial products by recency and by download count and which put four cards from a single vendor on the page in one block. It also ran a search query that named seven companies, which made SCL the editor of which AI firms appeared on its own site, and two technology press feeds gated on subject but not on tone, so a story mocking a named executive could reach an SCL page unread. Nothing on any of it was paid for, requested, or promised, and no vendor knew it existed. It was removed because a certification body should not be in a position where that paragraph has to be written, and because this was the cheapest of the exposures on this page to close. The two in sections 08 and 09 are larger and are still open.
Reporting a conflict
If you believe SCL has a conflict it has not disclosed, or that an assessment was influenced by one, report it through /complaints. You do not need to be a client, and you do not need a relationship with SCL of any kind.
Complaints about SCL's compliance with its own procedures, and about assessor conduct, are explicitly in scope. A complaint concerning the Principal is investigated externally. SCL acknowledges every report within five business days.
Related pages. Complaints and appeals. Accreditation status. The certification process. The SCL name and mark. What a certificate says, and what it does not.