Fortress Trusted AI is an AI-driven module within the Fortress platform designed to support supply chain security and third-party risk management. It incorporates validation mechanisms to verify AI-generated outputs before they are used in decision-making, addressing concerns around data integrity and processing accuracy. The platform offers two primary AI monitoring capabilities: AI Monitoring for Vendor Ecosystems provides visibility into third-party security and compliance data. It collects firmographic data on vendors, generates alerts for breaches, mergers and acquisitions, regulatory changes, and other critical third-party events, and prioritizes security and compliance risks originating from the vendor ecosystem. AI Monitoring for Products automates tracking and evaluation of patches and software updates, supports creation and analysis of software and hardware bills of materials (SBOM/HBOM), performs control and configuration analysis, and conducts provenance analysis with ongoing monitoring throughout the product lifecycle. To mitigate risks inherent in AI systems, Fortress applies controls across four areas: - Data Privacy: Monitoring and controls to safeguard data used by AI processes. - Training Data Integrity: Validation and checking of training data to ensure accuracy. - Processing Integrity: Use of documented and verified AI engines to maintain result accuracy. - Scaled Supervision: Human oversight combined with AI to maintain accuracy as the system scales. All AI-generated content undergoes a verification process to confirm accuracy and usability before being used for supply chain and cybersecurity intelligence.