# Validant Lab

Security compliance readiness for AI-built applications.

Validant Lab reads your repository, identity, data, payments, and AI boundaries. It maps what it finds to SOC 2 and GDPR controls, then waits for your approval.

## What it does

- Reads the systems a product already runs: source and code, hosting and deploy, data and storage, auth and identity, payments, AI and models. Read-only connections; nothing to install and nothing to migrate.
- Maps findings to SOC 2 and GDPR controls, ranked with the context needed to act on them.
- Proposes remediation. **Fixes require approval** — nothing is applied without a person accepting it.
- Collects the artifact that satisfies each control, pulled from the source and dated.
- Produces a readiness report. **Human review required.**

## Scope

SOC 2 and GDPR readiness only. This is readiness work, not certification: Validant Lab does not issue attestations, audit opinions, or legal advice.

## Links

- [Blog](https://validantlab.com/blog.md) — announcements, and notes on readiness for AI-built software
- [Interactive demo](https://validantlab.com/demo) — a walkthrough of the workspace; requires a browser
- Contact: founder@validantlab.com