Allied partner agreements
When an allied partner has already approved a model, an agreement says which of our rules their framework covers — so that work is reusedReusing an allied partner's accreditation for the parts their framework and ours agree on, instead of repeating that work. instead of repeated. People negotiate that list; software cannot, because whether their rulebook really covers our rule B2 is a judgement call. Agreements on file are listed first; example agreements you can put on file are below.
PARTNER-A — Partner A national AI assurance authority active
Illustrative recognition arrangement, Annex B · Partner A national AI assurance criteria (illustrative)
| Our rules it coversOur rules their framework is agreed to cover. Only these can ever be reused. | 15: A1, A2, A3, A4, A5, B1, B2, B3, C1, C2, D1, D2, D3, D5, D6 |
| Attack analysis | covered, against the MITRE ATLAS 2026.07 attack list |
| How long we may rely on an approval | 24 months |
| Markings we may send themWho this document may be shared with. It decides what can cross to a partner. | PARTNER-RELEASABLE, UNCLASSIFIED |
Covers the model itself and the testing of it. How we run it, what we judge to be sensitive, and what happens if it fails all stay with us — by design, not because the agreement is unfinished.
PARTNER-B — Partner B assurance directorate active
Illustrative recognition arrangement, Annex C · Partner B model documentation standard (illustrative)
| Our rules it coversOur rules their framework is agreed to cover. Only these can ever be reused. | 6: A1, A2, A4, A5, B1, B2 |
| Attack analysis | not covered — every attack technique is assessed here |
| How long we may rely on an approval | 12 months |
| Markings we may send themWho this document may be shared with. It decides what can cross to a partner. | UNCLASSIFIED |
Documentation and supply chain only. It does not cover attack analysis, so under this agreement every attack technique is assessed here.
Putting an agreement on file takes nothing on trust by itself. A package still has to arrive from that partner, and somebody here still has to sign for relying on it before anything can be approved. ← all packages