Continuous Certification
When you buy an agent package, the licence is one-time and perpetual: it is yours whether or not you ever pay us again. Continuous Certification is the separate, optional subscription that keeps the version you bought listed as a current Colleague AI Certified Release — and gives you the updated certified release if a change inside the covered scope means the standard package has to change.
What this is not. The Colleague AI Certified standard is Colleague AI’s own programme. It is not accreditation, attestation or certification by any third party, notified body or regulator, and it is not legal, regulatory or compliance advice. We do not represent that your use of an agent complies with any law that applies to you: that depends on your configuration, your data, your processes, your sector and your jurisdiction — none of which we can see.
What the subscription includes
- Active certification status. Your purchased version is listed as a current Colleague AI Certified Release for as long as the subscription runs.
- Monitoring of the covered scope. We watch for changes inside the scope below that would affect our own certification requirements.
- Regulatory-driven updates. If a change inside the covered scope requires a change to the standard agent package, you get the resulting certified release at no further licence fee.
- A verifiable certificate. A Certificate ID your auditor, client or board can check without going through you.
What it does not include
- Support, implementation or customisation work
- Any processing of your business data
- A feature roadmap, or releases on a schedule
Updates are conditional, not periodic. If nothing inside the covered scope changes in a given year, no new release is produced and none is owed. We would rather say that plainly than let “updates” be read as an annual version you are paying for.
Covered scope
The update obligation is bounded four ways, and all four apply together. This is the part worth reading closely, because it is what we are actually promising.
One — a closed list. The obligation attaches to these and nothing else, as they affect the standard agent package we ship:
- The EU AI Act (Regulation (EU) 2024/1689) as in force on the day your subscription starts, plus any later amendment we add by notice under “four” below
- Those ISO/IEC 42001 controls the Colleague AI Certified standard cites by number in its control map
- Revisions to the Colleague AI Certified standard itself
- Microsoft Copilot Studio and Power Platform changes that break a shipped connect package
Two — a closed list of what it touches. Even for something on that list, the obligation reaches only the package’s CAI tier classification, its human-oversight design, the audit-trail fields it emits, the transparency disclosures it surfaces, and the documentation shipped with it. Not model quality, accuracy, latency, cost, security patching, or anything about your environment.
Three — a materiality trigger. A release is owed only where a change on that list takes effect during your subscription and means the standard package as shipped would no longer meet the Colleague AI Certified standard in one of those five respects. Where we assess a change as not requiring a release, we publish that assessment against your certificate — so the judgement is on the record either way, and your auditor can see it.
Four — scope changes only forward. We can extend the covered scope only by notice, effective at your next renewal, never retroactively inside a term you have paid for. If we narrow it, you may terminate and take a pro-rata refund.
What we owe, and by when. We make the updated standard certified release available within 60 days of the trigger, or before the change’s own compliance deadline if that is later. We do not install it, migrate you, re-implement your customisations or support a version you decline to take. If you do not adopt an available release, your certificate reflects the version you are actually running — which is then no longer the current certified release.
If we stop producing a package. If we withdraw an agent, or decide not to produce an updated release for it, we tell you, cancel that subscription and refund the unused term pro rata. Your licence to the version you already bought is unaffected.
Outside the covered scope, always: your sector rules — DORA, MiFID II, HIPAA, PCI DSS, national implementations, supervisory guidance and anything specific to your licence; your own configuration, prompts, data, connectors or environment; any modified version of the agent; general product improvement and feature requests; security patching of Microsoft’s platform or your tenant; and anything that depends on facts about your business we do not hold.
Certification applies to the version as supplied
Certification covers the licensed version as delivered, and configuration within its documented supported parameters. If the agent’s logic, prompts, control flow or guardrails are modified beyond those parameters, the certification stops applying to the modified version. That is not a penalty — it is simply that we can only stand behind what we built.
If the subscription ends
Certification status lapses and the version should no longer be described as a current Colleague AI Certified Release. Your licence to the agent package is unaffected, and so is your access to what you have already downloaded.
Price
| CAI tier | Agent package (one-time) | Continuous Certification | Annual |
|---|---|---|---|
| L2 | $7,900 | $99 / month | $990 / year |
| L3 | $9,900 | $149 / month | $1,490 / year |
| L4 | $14,900 | $249 / month | $2,490 / year |
| L5 | $19,900 | $399 / month | $3,990 / year |
Annual billing equals ten monthly payments. L2-L4 agent package and Continuous Certification prices are fixed as listed. L5 is shown for CAI framework completeness; no L5 agent package is currently offered for sale.
Verify a certificate
Anyone holding a Certificate ID can check what it covers and whether it is currently active. The check returns no personal data about the holder.