What AAES governs
AAES can block an action when it controls the required credentials and the agent cannot bypass that path. On supported paths, AAES checks the requested action, obtains any required approval, accounts for configured spending commitments, and records the decision. An agent keeping its own direct credentials can bypass that path; observations of such activity do not establish enforcement.
AAES serves enterprise security, identity, platform engineering, and risk teams that need to evaluate controls on a specific business workflow. It operates alongside existing identity providers, credential stores, and monitoring systems.
Current stage and availability
AAES is pre-launch. Customer-run evaluations are available by request, and the core repository is private. The design-partner offer is $40,000 for six months. Managed hosting is planned and is not currently offered.
No SOC 2 report or independent certification is offered today. Provider adapters and capability packages have local tests or documentation reviews; live provider-tenant validation is part of design-partner work. Read the scope and status, capability matrix, and security statement before evaluating a workflow.
Evidence you can inspect
The evidence export specification, synthetic verification demonstration, and public verifier source let a technical reviewer inspect the format and integrity checks. A synthetic example is not a customer result.
An optional independent witness or timestamp authority can corroborate a signed journal head. Offline verification checks record integrity; it does not establish complete capture or downstream execution. Our trust model describes these boundaries and the configuration needed to evaluate them.
How we publish
AAES authors its product documentation and educational guides. Where a page describes another vendor or a governance framework, readers should follow the linked primary sources and the stated review date. Comparisons are written by AAES, which sells a competing product; they are not independent analyst rankings.
We distinguish implemented behavior, documentation review, local tests, and live deployment evidence. A review date records an editorial review, not certification or proof that a customer has accepted a control. Send factual corrections with the page URL and supporting evidence to hello@aaes.ai.
Official links and contact
Our canonical website is aaes.ai. The previous aaes.dev website redirects here.