Skip to main content

The scoring math is public. That’s the point.

A category standard has to be checkable by anyone, including the companies it scores. Here is exactly how a Trooth posture score is computed, witnessed, disputed, and consumed. No black box, no pay-to-raise.

Public formulaNo black boxNo pay-to-raise
The formula · v1 · July 31, 2026
score = Σ pillari · 100-point scale · recomputed every hourly pass
Witnessed scopeConnected sources, hourly pass completion, staleness penalties per degraded source.25 pts
Security & encryptionTLS posture, encryption at rest, secrets hygiene, vulnerability route, observed, not asserted.20 pts
Buyer review readinessCoverage across the 24 categories of the Buyer Review Standard, public items published.20 pts
AI registry & model cardsComplete model cards, system cards, and framework mappings for every AI system in use.20 pts
Team, contact & dossierNamed security contact, witnessed members, published dossier with two-signature receipts.15 pts
Every point maps to a witnessed observation with a timestamp and a signature. Points are never awarded for self-attestation, payment, or tenure, a Listed-free company and a paying customer are scored by the identical rule set.
Disputes · Public process
1Any company, claimed or not, files a dispute from its profile, pointing at the specific witnessed reading.
2The signed observation behind the reading is re-run immediately and published alongside the dispute.
3If the re-run contradicts the reading, the score corrects on the next pass and the correction is logged publicly in the witness ledger.
4Disputes, outcomes, and correction rates are public, the methodology is accountable to the same transparency it demands.
API & embeds · The standard travels

Witnessed postures are readable by anyone, procurement suites, GRC tools, spreadsheets. Public reads need no key.

curl https://api.trooth.co/public/trust/acme-ai
· Public trust profile JSON, score, state, last pass· Embeddable witnessed badge, /badge/[slug]· Webhooks for drift, posture changes push to your tools· OpenAPI 3.1 contract, CI-linted
What a profile publishes · Two kinds of truth

Every Network profile carries two clearly separated layers, and they are never mixed:

Witnessed, the posture score and every reading behind it. Computed by the formula above from live systems, hourly. A company cannot write, buy, or edit this layer.Self-published, everything the company says about itself: the bio, product offering, pricing, security summary, funding, updates, and its Cards - Trust & Transparency group (AI model cards plus the System, Data, Privacy, Security/VEX, AI Transparency, SBOM/AIBOM, and Hazard-Aware card templates). Labeled as the company’s own words wherever it appears.

Trooth witnesses; it does not attest, certify, endorse, or rank editorially. The advisory on every profile says exactly this.

Directory ordering · Factual, never editorial

The Network directory offers exactly two orderings, and both are mechanical facts:

Company name (A to Z), the default. Alphabetical, no ranking implied.Witnessed posture (high to low), an opt-in ordering of the already-public score, computed by this page’s formula and disputable through the process above.

There is no “recommended” list, no featured placement, and no paid position, and there never will be. Sorting orders published facts; it does not endorse a vendor. Every connected company is re-witnessed hourly, so recency is not a differentiator either.

Leaving the Network · The honest answer

Any company can unpublish its profile at any time. But the Network’s outside-in read of its public surface remains, refreshed daily, labeled honestly as unclaimed. Delisting doesn’t make the questions go away; it just removes your witnessed answers, your branding, and your voice from the page buyers are already reading. A low score with a rising trend beats no voice at all, and the score planner shows exactly how to claim the next points back.

Trooth holds itself to this standard.
Trooth, LLC is company #1 on its own Network, witnessed hourly, score public, methodology applied to ourselves first.
See Trooth’s profile →