Dart AI

Are scope, spend, and authority enforced while the agent runs?

Role-based access control is published on the vendor's own security page ("Role-based Access Controls and ensure users have access only to the resources relevant to their roles"), which bounds what a user may reach. That is access control over people, not a scope, spend or authority limit enforced on the agent at run time, and runtime_governance itself is no_public_information - hence 1 rather than 2.

Counts Permission scopes, each cited below.

Is there a tamper-evident record of what it actually did?

No public evidence found. Neither the homepage nor the /security capture describes a retained record of agent actions; audit_trail and audit_trail_immutable are both no_public_information.

Are compliance obligations attached per engagement?

The vendor states on its own security page that "Dart is compliant with SOC 2, GDPR, and CCPA". That is a self-declaration: no certificate, auditor, report date or scope is published on the capture, and no per-engagement schedule appears. Something published but uncertified scores 1.

Counts Compliance certifications, each cited below.

Does payment depend on a verified result?

No public evidence found. No outcome-linked pricing or settlement mechanism is published; outcome_based_pricing, settlement_mechanism and pricing_model are all no_public_information on the captures checked.

Can the deployment be insured, and is the customer indemnified?

No public evidence found. No cover, carrier, limit or customer indemnity appears on either capture; insurance_available, indemnification and liability_cap are all no_public_information.