Aderência Regulatória e Normativa

1. Purpose

This Policy controls how PrediSmart describes relationships between Platform capabilities and laws, regulations, standards, frameworks and certifications.

2. Status Vocabulary

SUPPORTED means the Platform provides capabilities relevant to a requirement. ALIGNED means architecture or controls were deliberately designed considering identified principles or requirements. VERIFIED means the stated alignment has undergone a defined formal assessment supported by evidence. CERTIFIED means a valid certification or attestation exists from an authorized or independent body where applicable.

3. Claims Control

PrediSmart shall not describe a product, organization, customer, process or operation as certified, compliant, conformant or verified unless the precise claim is supported by current evidence and the scope of that evidence.

4. Customer Responsibility

Platform alignment does not itself establish Customer compliance. Customer remains responsible for laws, permits, inspections, professional duties, technical standards, operating procedures and other requirements applicable to its organization, assets and facilities.

5. Compliance Matrix

PrediSmart may maintain an internal Compliance Matrix mapping requirement or principle to Platform capability, implementation, evidence, owner, status, scope and review date. Public claims should be traceable to this matrix or equivalent evidence.

6. Current Reference Framework

PrediSmart may use recognized frameworks, including the NIST Cybersecurity Framework 2.0, as non-certification references for governance and risk-management design. Any ISO, SOC, privacy, security or asset-management statement shall use the controlled status vocabulary above.

7. Review

Alignment statements are reviewed when material Platform architecture, law, standards, certification status, or supporting evidence changes.