Implemented controls
Controls available in the application and supporting operational modules.
Trust Center
Review which tools use AI, what is transmitted, how credits are charged, how usage is recorded and why outputs require competent human review.
Core capabilities
Controls available in the application and supporting operational modules.
Controls that require hosting, account, policy or integration setup.
Organization-specific data, access, legal and operating decisions.
External testing or certification remains separately evidenced.
How it works
Identify the relevant system and data scope.
Review implemented and required controls.
Assign customer and Amexwrite responsibilities.
Collect and review evidence.
Resolve gaps before production reliance.
Frequently asked questions
Evidence may be shared under appropriate authorization and confidentiality controls, depending on the record and customer relationship.
Next step
Send the framework, data type and intended deployment scope.