Webify.AI Signs the Cloud Security Alliance AI Trustworthy Pledge

Webify.AI has signed the Cloud Security Alliance's AI Trustworthy Pledge and is now listed on the CSA's public register of signatories. The pledge is a voluntary, public commitment to four principles for building and running AI systems: safety and compliance, transparency, ethical accountability and privacy protection. This article explains what we have committed to, what the pledge is not, and how you can check the listing yourself.

What the AI Trustworthy Pledge is

The Cloud Security Alliance (CSA) is the non-profit behind the Cloud Controls Matrix and the STAR registry, where cloud providers publish their security assessments. In June 2025 it launched the AI Trustworthy Pledge as part of its AI Safety Initiative. CSA describes the pledge as a first step toward its STAR for AI programme, and its launch announcement named Okta, Zscaler and Deloitte Consulting among the first signatories. Organisations that sign receive a digital badge and are listed on CSA's register.

The four principles, and what they mean in our work

CSA's wording for each principle is short. Here is each one, with the rule behind it at Webify.AI. None of this is new: the pledge puts a public name to practices we already work under, which you can also read on our security page.

• Safety and compliance: The pledge asks signatories to prioritise user safety and comply with applicable laws and regulations. In our work, evaluation and guardrails are designed into every build rather than added afterwards, data-protection terms are agreed before a developer touches personal data, and where a client has its own AI policy we follow it.
• Transparency: Signatories commit to being transparent about the AI systems they design, build, deploy or adopt. We tell clients which model and provider a feature uses and where their data goes, answers drawn from a client's documents can show the passage they came from, and our security page states plainly what we hold and what we don't.
• Ethical accountability: The pledge calls for fairness and the ability to explain AI outcomes, with responsibility clearly assigned. A person reviews every AI-assisted change before it reaches a client's repository. The agents we build hand a case to a person when needed and leave consequential actions, such as sending a reply, for a person to approve. The engineers on each project are named in the contract.
• Privacy protection: Signatories commit to upholding the highest standards of privacy protection for personal data. Client code and data never go into public AI tools, we ask for the least data the work needs and use test or anonymised data where we can, and when data must not leave a client's network we deploy private models on their own hardware or on IBM watsonx.

What the pledge is not

A pledge is a commitment, not an inspection. Nobody from CSA has audited our controls, and signing does not make a company ISO 27001 certified or give it a SOC 2 report. Webify.AI holds neither, and no Cyber Essentials certificate or HIPAA attestation either; that has not changed. If your procurement process needs one of those, the pledge will not substitute for it, and we would rather you know that before the first call. What the pledge does is put our commitments in public, in a place we do not control, where a client can hold us to them.

How to check the listing

Open CSA's register of AI Trustworthy Pledge signatories and look for Webify.AI. The badge CSA issues to signatories now appears in the footer of every page on this site, and the pledge section of our security page sets the four principles against what we do, next to the list of certifications we do not hold.

Why we signed

The clients we work with in the United States, the United Kingdom and the Gulf ask different questions before an AI project than they did two years ago. Then it was what a chatbot could do. Now it is where the data goes, which model processes it, who reviews what the AI produces and who is accountable when it is wrong. Those are the right questions, and the pledge's four principles are a sensible public frame for answering them. We signed because we can answer each one in writing today, not because a badge changes what we do.