What is the AI Security Foundation (AISF)?

The AI Security Foundation (AISF) is the definitive standards, certification, and industry-coordination body for AI security. We develop frameworks, certification programs, and best practices for secure AI development and deployment across industries.

What certifications does AISF offer?

AISF offers certification programs for AI systems, organizations, and professionals. Our certifications validate compliance with AI security standards and demonstrate commitment to secure AI practices.

How can organizations become AISF members?

Organizations can join AISF through our membership program. Members gain access to standards development, research, working groups, and certification discounts. Visit our membership page to learn about tiers and benefits.

Privacy Policy | AI Security Foundation

Effective Date: December 2025
Last Updated: December 13, 2025

1. Who We Are

The AI Security Foundation ("AISF," "we," "us," or "our") is a 501(c)(6) industry association (pending IRS determination) focused on AI security standards, certification, and education. Our principal address is:

AI Security Foundation
Email: privacy@aisecurityfoundation.org

2. Information We Collect

Information You Provide

When you interact with AISF, we may collect:

Contact Information: Name, email address, organization, and role
Professional Information: Areas of expertise, professional background
Application Information: Contributions, qualifications (for board applications)
Communication Preferences: Newsletter and alert subscription choices

Information Collected Automatically

When you visit our website, we may automatically collect:

IP address and approximate location
Browser type and version
Device information
Pages visited and time spent
Referring website

3. How We Use Your Information

We use your information to:

Send requested newsletters, security alerts, and updates
Process board and membership applications
Respond to inquiries and provide support
Improve our website and services
Comply with legal obligations

We will not sell your personal information to third parties.

4. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA), UK, or Switzerland, our legal bases include:

Consent: For marketing communications (you may withdraw at any time)
Legitimate Interests: To operate our organization and improve services
Contract: To process membership applications and provide requested services
Legal Obligation: To comply with applicable laws

5. Your Rights

Depending on your location, you may have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate information
Erasure: Request deletion of your data ("right to be forgotten")
Restrict Processing: Limit how we use your data
Data Portability: Receive your data in a structured format
Object: Opt out of certain processing
Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at privacy@aisecurityfoundation.org.

6. Email Communications

We comply with the CAN-SPAM Act, GDPR, CASL, and other applicable regulations:

We only send commercial emails with your consent
Every email includes an unsubscribe link
We honor opt-out requests within 10 business days
We clearly identify ourselves in all communications
Our physical address is included in commercial emails

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. When you unsubscribe from communications, we will remove your email from active mailing lists but may retain records for compliance purposes.

9. International Transfers

AISF is based in the United States. If you are located outside the US, your information may be transferred to and processed in the United States. We take steps to ensure adequate protection for international data transfers.

10. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the CCPA and CPRA, including:

Right to know what personal information is collected
Right to know whether information is sold or disclosed
Right to say no to the sale of personal information
Right to access and delete personal information
Right to equal service and price

We do not sell personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email to subscribed users. Your continued use of our services after changes indicates acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights:

AI Security Foundation
Attn: Privacy
Email: privacy@aisecurityfoundation.org

Return to Join