TrustAtlas

Cryptography, Encryption & Key Management

CSA AI Controls Matrix v1.1 domain

Protect AI data and assets with managed cryptographic controls.

What this domain means for procurement

Prompts, outputs, embeddings, fine-tuning data, model artifacts, and credentials all require appropriate encryption and key lifecycle controls.

How TrustAtlas dimensions support it

Data handling covers protected data throughout its lifecycle; security covers key custody, access controls, rotation, and cryptographic implementation.

Data handlingSecurity

This is an interpretive TrustAtlas cross-walk, not an official CSA mapping or evidence of AICM conformity.

Questions to ask vendors

Use these procurement prompts alongside the official CSA AICM v1.1 materials. They name the domain but do not invent or paraphrase control identifiers.

  1. Which customer data, embeddings, logs, model artifacts, and backups are encrypted in transit and at rest?
  2. Do you support customer-managed keys, and what data remains outside that key boundary?
  3. How are keys generated, accessed, rotated, revoked, and recovered, including during an incident?
← Change Control and Configuration Management Datacenter Security →

Related