Licence

CC0 1.0 Universal

AuditThis.ai is published under CC0 1.0 Universal. The licence text is the authority; this page summarizes it.

The licence

The content and code of this site, the method, the reference register, and the 2 prompts are dedicated to the public domain. Read the canonical CC0 1.0 text (opens in a new tab).

Parts

Parts under a different licence

• The AIQT Guardrails material the site is built and checked with (the gate scripts and the AIQT conduct text adapted from them, which are not served as part of the site's pages): Apache License 2.0 (licence text (opens in a new tab)).
• The 4 fonts the pages serve (Newsreader, Public Sans, JetBrains Mono, and Dancing Script): SIL Open Font License 1.1 (licence text (opens in a new tab)), each with its licence file beside the font files.
• The GitHub, LinkedIn, and ORCID marks in the footer: trademarks of their owners, used unaltered under their owners' published terms and not part of the CC0 grant.
• The referenced works, which the site links to and does not reproduce: each under its own licence, as the next section sets out.

References

The referenced works

This site reproduces no text from any reference. Each reference's own licence governs its use, and the reference register records the licence read from each source and the date it was read.

• CC BY-SA 4.0 references (GRC Library, Clean Language, OWASP ASVS, OWASP Top 10 for LLM Applications, OWASP SCVS, OWASP SAMM, OWASP Threat Modeling Playbook, Diátaxis, OWASP Web Security Testing Guide, OWASP AI Testing Guide, OWASP Cheat Sheet Series) are attributed by name and link in the register. The OWASP works are copyright the OWASP Foundation, Inc.; OWASP is a registered trademark of the OWASP Foundation, Inc., and the Foundation does not endorse and is not affiliated with this site.
• SLSA is published under the Community Specification License 1.0, a specification licence that differs from the open-source and Creative Commons licences of the other references.
• The DataGrail Privacy Assessment skill is distributed by its publisher under its own terms; this site only links to it.
• The CSA Cloud Controls Matrix and AI Controls Matrix are distributed by the Cloud Security Alliance under its own terms (licensing FAQ (opens in a new tab)). This site links to CSA's pages and hosts no copy; the prompts use only a copy the owner supplies, and reproduce only control identifiers and titles, attributed to the Cloud Security Alliance. The owner is responsible for holding whatever licence CSA requires for their use of the output.
• Apache 2.0, MIT, CC0, and US public domain references (AIQT Guardrails, Secure Config, WGO, MITRE ATLAS, CycloneDX, CHAOSS metrics, Minimum Viable Secure Product, NIST OSCAL content, and the 5 tools) are linked with the licence recorded in the register.

In plain language

What you may do

You may copy, change, distribute, and perform the work, commercially included, for any purpose, with no conditions: the author has waived their copyright and related rights to the fullest extent the law allows (sections 2 and 3), and no attribution is required.

Key limits, as the CC0 text states: trademark and patent rights held by the author are not waived, abandoned, or licensed (section 4(a)); the work is offered as is, without representations or warranties of any kind, including title, merchantability, fitness for a particular purpose, non-infringement, or the absence of defects or errors (section 4(b)); the author takes no responsibility for clearing other people's rights that may apply to the work (section 4(c)).

The Apache-licensed AIQT material

You may use, reproduce, change, and redistribute the work, in source or object form, commercially included, under the conditions of section 4 of the licence:

• give every recipient a copy of the licence (4(a));
• make modified files carry prominent notices stating that you changed them (4(b));
• keep all copyright, patent, trademark, and attribution notices from the source form, other than notices that do not pertain to your derivative work (4(c));
• where the work ships a NOTICE file, include a readable copy of its attribution notices in your distribution: in a NOTICE file, in the source or documentation, or in a display where third-party notices normally appear (4(d)).

Key limits: each contributor grants you a patent licence for the work, which ends for you on the date you file patent litigation claiming that the work infringes a patent (section 3); the licence grants no trademark rights beyond reasonable and customary use in describing the work's origin and reproducing the NOTICE file (section 6); the work is provided as is, without warranties or conditions of any kind (section 7), and contributors are not liable for damages arising from its use (section 8).

The fonts

You may use, study, copy, merge, embed, modify, redistribute, and sell the fonts, alone or bundled with software, under the 5 conditions of the Open Font License:

• neither the fonts nor their components may be sold by themselves (condition 1);
• every copy, original or modified, carries the copyright notice and the licence (condition 2);
• a modified version may not use the reserved font names unless the copyright holder permits it (condition 3);
• the names of the copyright holders and authors may not be used to promote a modified version without their permission (condition 4);
• the fonts, modified or not, are distributed only under this licence (condition 5).

The fonts are provided as is, without warranty.

The licence text governs; this is a summary, not legal advice.

Note