Compliance

Frameworks and standards that guide how LinkSign AI builds and deploys applied AI

We work with institutions, enterprises and public agencies whose systems must meet strict regulatory and accessibility requirements. The frameworks below shape our engineering practice, our procurement responses and our partner due diligence. Formal certifications are stated only where held; otherwise we align our controls to the standard.

Data protection and privacy

GDPR (EU 2016/679): Lawful basis, data‑subject rights, DPAs with processors, breach notification and cross‑border transfer safeguards.
Jordan Personal Data Protection Law (No. 24 of 2023): National requirements for consent, processing purposes, data‑subject rights and the Personal Data Protection Council.

Information security

ISO/IEC 27001: Information security management: risk assessment, access control, cryptography, supplier security and incident management.
SOC 2 (Trust Services Criteria): Security, availability, confidentiality and privacy controls expected by enterprise procurement.
NIST Cybersecurity Framework 2.0: Govern, identify, protect, detect, respond and recover functions used to structure security programmes.

Responsible and trustworthy AI

ISO/IEC 42001: AI management system: governance, impact assessment, lifecycle controls and continual improvement.
NIST AI Risk Management Framework: Map, measure, manage and govern AI risks including bias, robustness, explainability and privacy.
EU AI Act: Risk‑based obligations for AI systems, including transparency, human oversight and documentation for high‑risk uses.

Accessibility and inclusion

WCAG 2.2 (Level AA): Perceivable, operable, understandable and robust interfaces, including captions, sign‑language alternatives and keyboard access.
EN 301 549: European accessibility requirements for ICT products and services used in public procurement.
UN CRPD: Convention on the Rights of Persons with Disabilities, ratified by Jordan, recognizing sign languages and accessible communication.

Reporting a concern

To report a security vulnerability, a privacy concern or a suspected compliance issue, write to Contact@linksignai.com. We acknowledge reports within two business days and do not pursue good‑faith security researchers.