# Spectrum card: Spinnable AI employees

> GAMMA-Ray v0.0.155 (beta, for review; every rating is experimental). The GAMMA-Ray Spectrum beta card of Spinnable AI employees: A3 · R2 · C1 · O2, Building; 69 provisions lit across 8 instruments.
> Page: https://gamma-ray.sgit.ai/spectrum/cards/spinnable-ai-employees/ · Source: data/scans/spinnable-ai-employees.json


Spectrum 0.2 beta · Public tier · read 2026-11-10 · not reviewed by its vendor yet

Role-based AI workers with their own email address, memory, scheduled tasks and access to 35+ connected tools, reachable by email, WhatsApp, Slack, meetings and voice.

Spinnable AI employees a product, as documented SPECTRUM 0.2 BETA · Public tier · 2026-11-10 A3 Autonomy Acts π Moderate · S1·R5·A1 ×3 R2 Reach Integrated π Moderate · S1·R5·A1 ×3 C1 Control Stated π Moderate · S1·R5·A1 ×3 O2 Openness Documented π Moderate · S1·R5·A1 ×3 Draft Stage: Building (8 of 16) In production Standout. Autonomy 3 (Acts): "They can check your calendar, update databases, and send emails." Next unlock. Control 2 (Configurable): public evidence that high-impact actions need a person's approval would get there. Trust. FACT-Ray : 23 facts: 23 π Moderate · found by an agent, captured and hashed, checked by 2 other agents (same model family, shared repository); no human has signed it. Standards constellation. 69 provisions lit across 8 of 8 instruments. Salesforce EAAMM OWASP MCP AAGMM Microsoft NIST AI Act Evidence: 19 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

*Figure. The walk from the card down to each indicator, its public source and the instruments it touches; the sections below list the same in text.*

## What each level rests on

*Figure. For each dimension, what its level rests on: one fold-out per fact, each opening that fact's path down to the source.*

This card rates a product as its vendor documents it, not anyone's deployment of it. A feature the operator has to turn on counts, and is marked as available. Levels are computed from the evidence below by [published rules](../../evidence-map/index.md). A dimension with no evidence reads "not yet evidenced".

## Autonomy: level 3, Acts

*What does the agent do on its own?* Completes routine tasks end to end; a person handles exceptions.

- `I08` It executes actions itself. The documentation states workers act in connected tools, such as updating databases and sending emails. "They can check your calendar, update databases, and send emails." [Source](https://docs.spinnable.ai/concepts/ai-workers) (read, documented, captured 2026-11-10T19:45Z, sha256 `9d2680d11239f6d5`) · π Moderate · S1·R5·A1 ×3
- `I17` The agent handles routine tasks; the person is consulted on exceptions. The home page FAQ states that a worker schedules tasks, sends follow-ups and completes workflows without being prompted each time, that it will not take actions with external consequences without the person's approval and asks when unsure; no documentation page describes how that approval is configured. "it won't take actions with external consequences without your approval" [Source](https://www.spinnable.ai/) (read, documented, captured 2026-11-10T19:45Z, sha256 `e524bed247dadd0e`) · π Moderate · S1·R5·A1 ×3

This evidence touches 4 provisions: Salesforce, Microsoft, EAAMM.

**Next unlock: level 4, Orchestrates.** Public evidence that the agent works independently; the person approves critical decisions only.

## Reach: level 2, Integrated

*How connected is it?* Documented connectors to common tools.

- `I10` It works across several domains or systems. Workers connect to many tools across a business, from email and calendar to GitHub, Notion and Salesforce. "connect to 35+ tools to work across your entire tech stack" [Source](https://docs.spinnable.ai/tools/overview) (read, documented, captured 2026-11-10T19:45Z, sha256 `e175e5806f7aa1d7`) · π Moderate · S1·R5·A1 ×3
- `I11` It connects to external tools or services across a trust boundary. Each tool is connected by authenticating with the outside service through OAuth or an API key. "Authenticate with the service (OAuth or API key)" [Source](https://docs.spinnable.ai/tools/overview) (read, documented, captured 2026-11-10T19:45Z, sha256 `e175e5806f7aa1d7`) · π Moderate · S1·R5·A1 ×3

This evidence touches 8 provisions: Salesforce, Microsoft, OWASP, NIST AI RMF.

**Next unlock: level 3, Open protocol.** Public evidence that there is a published protocol or communication layer between agents.

## Control: level 1, Stated

*Can people stay in command?* Documents say how people approve, override or stop it.

- `I47` A limit on it is a rule in prose. Persistent rules for a worker are written in prose in its Worker Policy. "Worker Policy instructions are treated as the highest-priority rules and apply across all conversations." [Source](https://docs.spinnable.ai/guides/corporate-email) (read, documented, captured 2026-11-10T19:45Z, sha256 `a9df835d12dae365`) · π Moderate · S1·R5·A1 ×3

This evidence touches 1 provision: OWASP.

**Next unlock: level 2, Configurable.** Public evidence that high-impact actions need a person's approval.

## Openness: level 2, Documented

*Does it show its work?* Public documents on how it works, its data, its models and its limits.

- `I22` Its limits and known failure cases are documented for those who use it. The troubleshooting page documents failure cases, such as a worker stopping mid-workflow, with causes and fixes. "Your worker initiates a task or multi-step workflow, but stops mid-way" [Source](https://docs.spinnable.ai/troubleshooting/index) (read, documented, captured 2026-11-10T19:45Z, sha256 `dcf489600b0425cf`) · π Moderate · S1·R5·A1 ×3
- `I58` The data it uses is described. The privacy policy lists what the agents access: email, calendar, documents, messages and data from connected platforms. "When our AI agents work for you, they access:" [Source](https://www.spinnable.ai/privacy-policy) (read, documented, captured 2026-11-10T19:45Z, sha256 `7558a1dcef25c8a6`) · π Moderate · S1·R5·A1 ×3

This evidence touches 7 provisions: NIST AI RMF, EU AI Act, AAGMM, EAAMM, Salesforce.

**Next unlock: level 3, Measured.** Public evidence that test or evaluation results are published.

## How far to trust this card

**Status: Draft.** Draft means the facts were found in public pages and reviewed by agents. The company has not confirmed them and no customer has gone on record. [FACT-Ray](../../../fact-ray/index.md) says how far each fact can be trusted: who says it (Source), how firmly it is recorded (Record) and who stands behind it (Accountability). It never changes a level.

- **The facts:** 23 facts: 23 π Moderate. Each is written beside its evidence above.
- **The chain:** found by an agent, captured and hashed, checked by 2 other agents (same model family, shared repository); no human has signed it.
- **Who:** produced by `gamma.studio@web-summit.dinis`; checked by `gamma.review@web-summit.dinis` and `gamma.approve@web-summit.dinis`. [The actors](../../../fact-ray/actors/index.md).
- **What would raise it:** the company's own file at `/.well-known/fact-ray.json` (Source 2), a customer's statement of use (Source 3), or a named person signing the card ([how](../../../fact-ray/well-known/index.md)).

## The standards constellation

One piece of public evidence can speak to several frameworks at once. "Touched" never means "complies". The share is of the provisions that can be read from outside.

| Instrument | Provisions touched | Of those publicly readable |
|---|---|---|
| Salesforce | 13 | 24 |
| EAAMM | 3 | 8 |
| OWASP | 12 | 18 |
| MCP authorization | 4 | 8 |
| AAGMM | 7 | 7 |
| Microsoft | 10 | 23 |
| NIST AI RMF | 16 | 20 |
| EU AI Act | 4 | 6 |

The 69 provisions lit

Each line item, with the facts that reach it. "Evidenced" is a link of the kind *same*: the fact is what the provision asks. "Partly" is a link of the kind *part*: the fact is one piece of it. "Its absence" points the other way. Each provision has its own page with its text and its place in the source.

| Provision | Instrument | Reached by | How far |
|---|---|---|---|
| [`sf.a04`](../../../provisions/sf.a04/index.md) Level 0, how companies can advance from Level 0 to Level 1 | Salesforce | [I58](https://www.spinnable.ai/privacy-policy) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a06`](../../../provisions/sf.a06/index.md) Level 0, how companies can advance from Level 0 to Level 1 | Salesforce | [S1](https://www.spinnable.ai/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a07`](../../../provisions/sf.a07/index.md) Level 1, how to advance from Level 1 to Level 2 | Salesforce | [I08](https://docs.spinnable.ai/concepts/ai-workers) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.a08`](../../../provisions/sf.a08/index.md) Level 1, how to advance from Level 1 to Level 2 | Salesforce | [I58](https://www.spinnable.ai/privacy-policy) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a10`](../../../provisions/sf.a10/index.md) Level 1, how to advance from Level 1 to Level 2 | Salesforce | [I57](https://docs.spinnable.ai/support/contact) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.L2`](../../../provisions/sf.L2/index.md) Level 2: Simple Orchestration, Single Domain | Salesforce | [I08](https://docs.spinnable.ai/concepts/ai-workers) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a13`](../../../provisions/sf.a13/index.md) Level 2, how to advance from Level 2 to Level 3 | Salesforce | [I12](https://docs.spinnable.ai/release-notes/2026-06-10) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a14`](../../../provisions/sf.a14/index.md) Level 2, how to advance from Level 2 to Level 3 | Salesforce | [I25](https://docs.spinnable.ai/release-notes/2026-08-05) (partly), [I26](https://docs.spinnable.ai/concepts/ai-workers) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a16`](../../../provisions/sf.a16/index.md) Level 2, how to advance from Level 2 to Level 3 | Salesforce | [I10](https://docs.spinnable.ai/tools/overview) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.L3`](../../../provisions/sf.L3/index.md) Level 3: Complex Orchestration, Multiple Domain | Salesforce | [I10](https://docs.spinnable.ai/tools/overview) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`sf.a17`](../../../provisions/sf.a17/index.md) Level 3, how to advance from Level 3 to Level 4 | Salesforce | [I10](https://docs.spinnable.ai/tools/overview) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a21`](../../../provisions/sf.a21/index.md) Level 3, how to advance from Level 3 to Level 4 | Salesforce | [I25](https://docs.spinnable.ai/release-notes/2026-08-05) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`sf.a28`](../../../provisions/sf.a28/index.md) Level 4, how to maximize value | Salesforce | [I57](https://docs.spinnable.ai/support/contact) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.L3`](../../../provisions/eaamm.L3/index.md) L3 Consultative (survey item Q9) | EAAMM | [I17](https://www.spinnable.ai/) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.D2`](../../../provisions/eaamm.D2/index.md) Readiness dimension 2 | EAAMM | [I58](https://www.spinnable.ai/privacy-policy) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`eaamm.G2`](../../../provisions/eaamm.G2/index.md) Prerequisite, L2 to L3 | EAAMM | [I40](https://docs.spinnable.ai/release-notes/2026-10-28) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.AT4`](../../../provisions/owasp.AT4/index.md) AT4 Code Executing Agent | OWASP | [I04](https://docs.spinnable.ai/guides/worker-vault) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.AT6`](../../../provisions/owasp.AT6/index.md) AT6 Externally Extended Agent | OWASP | [I11](https://docs.spinnable.ai/tools/overview) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.AT7`](../../../provisions/owasp.AT7/index.md) AT7 Multi-Agent Orchestration | OWASP | [I12](https://docs.spinnable.ai/release-notes/2026-06-10) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k02`](../../../provisions/owasp.k02/index.md) Maturity Level 0 Unaware and Ad Hoc, key enterprise action | OWASP | [I30](https://docs.spinnable.ai/guides/change-manager) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k03`](../../../provisions/owasp.k03/index.md) Maturity Level 0 Unaware and Ad Hoc, key enterprise action | OWASP | [I41](https://docs.spinnable.ai/guides/connecting-tools) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k04`](../../../provisions/owasp.k04/index.md) Maturity Level 0 Unaware and Ad Hoc, key enterprise action | OWASP | [I47](https://docs.spinnable.ai/guides/corporate-email) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k07`](../../../provisions/owasp.k07/index.md) Maturity Level 1 Experimentation without Guardrails, key enterprise action | OWASP | [I21](https://docs.spinnable.ai/concepts/tool-permissions) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k09`](../../../provisions/owasp.k09/index.md) Maturity Level 1 Experimentation without Guardrails, key enterprise action | OWASP | [I41](https://docs.spinnable.ai/guides/connecting-tools) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k10`](../../../provisions/owasp.k10/index.md) Maturity Level 1 Experimentation without Guardrails, key enterprise action | OWASP | [I68](https://docs.spinnable.ai/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k16`](../../../provisions/owasp.k16/index.md) Maturity Level 2 Policy-Defined, Human-in-the-Loop, key enterprise action | OWASP | [I30](https://docs.spinnable.ai/guides/change-manager) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k18`](../../../provisions/owasp.k18/index.md) Maturity Level 3 Integrated, Continuous Oversight, key enterprise action | OWASP | [I39](https://docs.spinnable.ai/concepts/communication-channels) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`owasp.k23`](../../../provisions/owasp.k23/index.md) Maturity Level 4 Adaptive, Self-Regulating Governance, key enterprise action | OWASP | [I26](https://docs.spinnable.ai/concepts/ai-workers) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.01`](../../../provisions/mcp.01/index.md) Authorization (draft) | MCP authorization | [S3](https://www.spinnable.ai/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.02`](../../../provisions/mcp.02/index.md) Authorization (draft) | MCP authorization | [S3](https://www.spinnable.ai/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`mcp.06`](../../../provisions/mcp.06/index.md) Authorization (draft) | MCP authorization | [I25](https://docs.spinnable.ai/release-notes/2026-08-05) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`mcp.15`](../../../provisions/mcp.15/index.md) Authorization (draft) | MCP authorization | [I25](https://docs.spinnable.ai/release-notes/2026-08-05) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-02`](../../../provisions/aagmm.GD-02/index.md) GD-02 | AAGMM | [I25](https://docs.spinnable.ai/release-notes/2026-08-05) (partly), [I26](https://docs.spinnable.ai/concepts/ai-workers) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-03`](../../../provisions/aagmm.GD-03/index.md) GD-03 | AAGMM | [I41](https://docs.spinnable.ai/guides/connecting-tools) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-05`](../../../provisions/aagmm.GD-05/index.md) GD-05 | AAGMM | [I58](https://www.spinnable.ai/privacy-policy) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-06`](../../../provisions/aagmm.GD-06/index.md) GD-06 | AAGMM | [I40](https://docs.spinnable.ai/release-notes/2026-10-28) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-08`](../../../provisions/aagmm.GD-08/index.md) GD-08 | AAGMM | [I41](https://docs.spinnable.ai/guides/connecting-tools) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-09`](../../../provisions/aagmm.GD-09/index.md) GD-09 | AAGMM | [I12](https://docs.spinnable.ai/release-notes/2026-06-10) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aagmm.GD-12`](../../../provisions/aagmm.GD-12/index.md) GD-12 | AAGMM | [I68](https://docs.spinnable.ai/llms.txt) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.2.1`](../../../provisions/ms.200.2.1/index.md) 200: Repeatable, Business strategy | Microsoft | [I08](https://docs.spinnable.ai/concepts/ai-workers) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.4.2`](../../../provisions/ms.200.4.2/index.md) 200: Repeatable, Technology and data | Microsoft | [I10](https://docs.spinnable.ai/tools/overview) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.200.5.2`](../../../provisions/ms.200.5.2/index.md) 200: Repeatable, Organization and culture | Microsoft | [I30](https://docs.spinnable.ai/guides/change-manager) (its absence) | its absence · π Moderate · S1·R5·A1 ×3 |
| [`ms.300.2.3`](../../../provisions/ms.300.2.3/index.md) 300: Defined, Business strategy | Microsoft | [I21](https://docs.spinnable.ai/concepts/tool-permissions) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.400.2.1`](../../../provisions/ms.400.2.1/index.md) 400: Capable, Business strategy | Microsoft | [I10](https://docs.spinnable.ai/tools/overview) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`ms.400.2.3`](../../../provisions/ms.400.2.3/index.md) 400: Capable, Business strategy | Microsoft | [S1](https://www.spinnable.ai/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.400.3.2`](../../../provisions/ms.400.3.2/index.md) 400: Capable, AI governance and security | Microsoft | [I68](https://docs.spinnable.ai/llms.txt) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`ms.500.1.2`](../../../provisions/ms.500.1.2/index.md) 500: Efficient, AI strategy and experience | Microsoft | [I68](https://docs.spinnable.ai/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.500.2.2`](../../../provisions/ms.500.2.2/index.md) 500: Efficient, Business strategy | Microsoft | [I68](https://docs.spinnable.ai/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`ms.500.4.1`](../../../provisions/ms.500.4.1/index.md) 500: Efficient, Technology and data | Microsoft | [I12](https://docs.spinnable.ai/release-notes/2026-06-10) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.GOVERN-3.2`](../../../provisions/nist.GOVERN-3.2/index.md) GOVERN 3.2 | NIST AI RMF | [I40](https://docs.spinnable.ai/release-notes/2026-10-28) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.GOVERN-5.1`](../../../provisions/nist.GOVERN-5.1/index.md) GOVERN 5.1 | NIST AI RMF | [I57](https://docs.spinnable.ai/support/contact) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.GOVERN-5.2`](../../../provisions/nist.GOVERN-5.2/index.md) GOVERN 5.2 | NIST AI RMF | [I57](https://docs.spinnable.ai/support/contact) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.GOVERN-6.1`](../../../provisions/nist.GOVERN-6.1/index.md) GOVERN 6.1 | NIST AI RMF | [I11](https://docs.spinnable.ai/tools/overview) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MANAGE-2.4`](../../../provisions/nist.MANAGE-2.4/index.md) MANAGE 2.4 | NIST AI RMF | [I39](https://docs.spinnable.ai/concepts/communication-channels) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MANAGE-4.2`](../../../provisions/nist.MANAGE-4.2/index.md) MANAGE 4.2 | NIST AI RMF | [I68](https://docs.spinnable.ai/llms.txt) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-1.1`](../../../provisions/nist.MAP-1.1/index.md) MAP 1.1 | NIST AI RMF | [I20](https://docs.spinnable.ai/introduction) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-1.3`](../../../provisions/nist.MAP-1.3/index.md) MAP 1.3 | NIST AI RMF | [I20](https://docs.spinnable.ai/introduction) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-1.4`](../../../provisions/nist.MAP-1.4/index.md) MAP 1.4 | NIST AI RMF | [S1](https://www.spinnable.ai/) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-2.1`](../../../provisions/nist.MAP-2.1/index.md) MAP 2.1 | NIST AI RMF | [I20](https://docs.spinnable.ai/introduction) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-2.2`](../../../provisions/nist.MAP-2.2/index.md) MAP 2.2 | NIST AI RMF | [I22](https://docs.spinnable.ai/troubleshooting/index) (evidenced), [I21](https://docs.spinnable.ai/concepts/tool-permissions) (partly) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-3.3`](../../../provisions/nist.MAP-3.3/index.md) MAP 3.3 | NIST AI RMF | [I20](https://docs.spinnable.ai/introduction) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MAP-4.1`](../../../provisions/nist.MAP-4.1/index.md) MAP 4.1 | NIST AI RMF | [I11](https://docs.spinnable.ai/tools/overview) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-2.5`](../../../provisions/nist.MEASURE-2.5/index.md) MEASURE 2.5 | NIST AI RMF | [I22](https://docs.spinnable.ai/troubleshooting/index) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-3.3`](../../../provisions/nist.MEASURE-3.3/index.md) MEASURE 3.3 | NIST AI RMF | [I57](https://docs.spinnable.ai/support/contact) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`nist.MEASURE-4.3`](../../../provisions/nist.MEASURE-4.3/index.md) MEASURE 4.3 | NIST AI RMF | [I68](https://docs.spinnable.ai/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aiact.art-12`](../../../provisions/aiact.art-12/index.md) Article 12 | EU AI Act | [I41](https://docs.spinnable.ai/guides/connecting-tools) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |
| [`aiact.art-13`](../../../provisions/aiact.art-13/index.md) Article 13 | EU AI Act | [I20](https://docs.spinnable.ai/introduction) (partly), [I22](https://docs.spinnable.ai/troubleshooting/index) (partly), [S3](https://www.spinnable.ai/llms.txt) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aiact.art-14`](../../../provisions/aiact.art-14/index.md) Article 14 | EU AI Act | [I39](https://docs.spinnable.ai/concepts/communication-channels) (partly) | partly · π Moderate · S1·R5·A1 ×3 |
| [`aiact.art-50`](../../../provisions/aiact.art-50/index.md) Article 50 | EU AI Act | [I56](https://docs.spinnable.ai/guides/corporate-email) (evidenced) | evidenced · π Moderate · S1·R5·A1 ×3 |

## Upper layers

The public card is the front door. The same evidence, read with the governance rules, is this agent's [GAMMA-Ray rating](../../../scans/spinnable-ai-employees/index.md): freedom, governance, the level held, the grant and a work order. That layer is written for an operator.

## The vault

Every source behind this card was captured and hashed into a public sgit vault (`kghdiwq3`): `captures.json` lists each URL with the SHA-256 of what was fetched and when. Read key:

`sgit_public_read_76f8699d4556bfb03360cbda6e61d0c7f76b07e13444704e4ced072a90a1742c:kghdiwq3`

With [sgit](https://sgit.ai/): `sgit clone sgit_public_read_76f8699d4556bfb03360cbda6e61d0c7f76b07e13444704e4ced072a90a1742c:kghdiwq3`.