<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
    <channel>
        <title>NotAI Trust Center Updates</title>
        <link>https://trust.isnotai.com/updates</link>
        <description>Announcements about NotAI's security and compliance posture: certification progress, new and updated documents, subprocessor changes, policy changes, and security notices.</description>
        <language>en-us</language>
        <lastBuildDate>Sun, 23 Aug 2026 00:00:00 GMT</lastBuildDate>
        <item>
            <title>Accessibility Conformance Report and HECVAT Lite Now Public Downloads</title>
            <link>https://trust.isnotai.com/updates#2026-08-23</link>
            <guid>https://trust.isnotai.com/updates#2026-08-23</guid>
            <category>Compliance</category>
            <description>The Accessibility Conformance Report (VPAT) and the HECVAT Lite questionnaire response are now public downloads in the resource library. Both are regenerated continuously from live evidence by an automated compliance pipeline. HECVAT Full remains available to enterprise customers in the dashboard's Documents section.</description>
            <pubDate>Sun, 23 Aug 2026 00:00:00 GMT</pubDate>
        </item>
        <item>
            <title>Subprocessor Table Corrected: Google LLC Added</title>
            <link>https://trust.isnotai.com/updates#2026-08-23-2</link>
            <guid>https://trust.isnotai.com/updates#2026-08-23-2</guid>
            <category>Subprocessors</category>
            <description>The subprocessor table on this site now lists Google LLC (business email communications: names, email addresses, and message content of business correspondence, processed in the United States under a data processing agreement with standard contractual clauses where applicable). Google LLC was already disclosed in the subprocessor list in Section 5 of the NotAI Privacy Policy, which Annex 3 of the DPA incorporates by reference. This entry corrects an omission from the table on this site; it is not the addition of a new subprocessor, so the thirty (30) day advance notice period committed in Section 5.4 of the DPA is not restarted.</description>
            <pubDate>Sun, 23 Aug 2026 00:00:00 GMT</pubDate>
        </item>
        <item>
            <title>NotAI Trust Center Launched</title>
            <link>https://trust.isnotai.com/updates#2026-08-17</link>
            <guid>https://trust.isnotai.com/updates#2026-08-17</guid>
            <category>General</category>
            <description>The NotAI Trust Center is now live. It is self-hosted on our own infrastructure, sets zero cookies and loads zero third-party scripts, and ties access to restricted documents to our existing enterprise authentication rather than a third-party approval service.</description>
            <pubDate>Mon, 17 Aug 2026 00:00:00 GMT</pubDate>
        </item>
        <item>
            <title>SOC 2 Type II Report Available to Customers</title>
            <link>https://trust.isnotai.com/updates#2026</link>
            <guid>https://trust.isnotai.com/updates#2026</guid>
            <category>Compliance</category>
            <description>NotAI maintains a SOC 2 Type II attestation, refreshed annually. The current report is available under NDA to authenticated enterprise customers through the resource library.</description>
        </item>
    </channel>
</rss>
