Attestations

Respond to a request to acknowledge a compliance policy that applies to a managed AI asset you own or steward.

Unlike a case, an issue, or a policy exception, you don't create an attestation. AI Control Tower generates an attestation when a compliance policy that applies to a managed AI asset requires acknowledgment from the asset's steward or owner. Activity Center surfaces the attestation, but selecting it takes you to the AI Risk and Compliance Workspace, where you review the policy and record your response.

Attestation lifecycle

An attestation starts with no response. You review the policy and choose how to respond: accept it to confirm the asset complies, or decline it if the asset doesn't. If the asset can't currently meet the policy, you can request an exception instead of attesting directly; see Policy exceptions for more information. AI Control Tower can also exempt an attestation if the policy no longer applies to the asset, or cancel it if it's no longer needed.

Where attestations appear

Attestations appear on the Attestations sub-tab of the Team and Assigned to you tabs in Activity Center, depending on assignment.