A placeholder for AI systems that run outside a cloud tenancy: software a customer installs and operates, models on edge hardware and AI embedded in a physical product. It holds the physical, media handling and maintenance dispositions that saas-ai-provider puts out of scope, so that each one has a named home rather than reading as an omission. Phase U3 splits it into separate on-premises, edge and embodied profiles behind the demand gate ADR-024 set; no control is authored against it until then.

Roles

ProviderDeployer

Deployment models

On premisesHybridEdgeOn deviceEmbeddedAir gapped

Risk classes

noneminimaltransparencyhigh-risk-annex-ihigh-risk-annex-iii

Jurisdictions

EUUS-federalINT

Frameworks

NIST-800-53ISO-27001CSA-CCM

Applicability statement

No applicability statement yet. This profile is named in the model and its controls are not authored.