Open governance framework · v1.3 · Practitioner-led · not an accredited standard, certification, or regulatory requirement · seeking shadow-evaluation partners
Home/Pricing

Open framework · optional platform

The framework is free. The platform is optional.

The specification, control catalog, conformance test suite, reference implementation, simulator, and documentation are published under CC BY 4.0 and stay that way. TrustLayer adds hosted production infrastructure for organizations that want it.

Community
$0

For practitioners, researchers, developers, and anyone implementing the framework themselves. No account, no signup, no expiry.

  • Full v1.3 specification and control catalog
  • Conformance test suite (YAML definitions + runner)
  • Reference implementation — policy engine, middleware, adapters
  • NHID-Auth v2 cryptographic authorization reference code
  • The open simulator, with no account required
  • All documentation and regulatory alignment mappings
  • Community support through GitHub issues and discussions
Explore the framework
Developer
Contact for pricing

For AI vendors and engineering teams building agents that need to demonstrate conformance to their customers.

  • Everything in Community
  • Hosted sandbox environment
  • API access beyond the public demo routes
  • Generated conformance reports you can share
  • Conformance history across agent versions
  • Integration support during onboarding
Talk to us
Enterprise
Contact for pricing

For payers, provider organizations, and health systems operating or receiving AI agent traffic at scale.

  • Everything in Developer
  • Trust Gateway — runtime enforcement
  • Evidence Center — audit-ready evidence generation
  • Continuous conformance monitoring across an agent fleet
  • Agent Registry with approval workflows
  • SSO, RBAC, integrations, and SIEM export
  • Named support
Talk to us
ⓘ The specification is never paid. No plan, tier, or contract gates the specification, the control catalog, or the conformance test suite. Paid plans buy hosted operations — monitoring, evidence generation, identity management, and enterprise integration — never access to the standard itself.
ⓘ Pricing is not yet set. TrustLayer is in development with design partners. Developer and Enterprise plans describe the intended packaging; specific pricing will be published once the platform is generally available.

Common question

Why is there a paid tier at all?

Because running the controls in production is a different job from defining them. Someone has to operate the monitoring, retain the evidence, integrate with an identity provider, and answer the phone when a control fails at 2am. Organizations that want to do that themselves have everything they need under CC BY 4.0 — and that path stays fully supported.

The open framework is the source of legitimacy for this work. Putting it behind a paywall would destroy the thing that makes it worth adopting.

Not sure where to start?

Most people start free, and most stay there.

Explore the framework →Spec, controls, tests, code — free. Run a free evaluation →See the controls fire in the simulator. Shadow evaluation →Baseline your own call logs, no cost. TrustLayer platform →What the paid tiers operate.

NHID-Clinical is a voluntary open framework — not an accredited standard, certification, or regulatory requirement. TrustLayer is in active development and does not constitute a compliance guarantee.