Privacy policies need an automated decision-making section by 10 December 2026.
Draft yours free

Certified businesses

Block8.ai

Active

Cybersecurity, AI-Powered Penetration Testing · 3-10 employees · ABN 42682456140

Responsible AI Certified · Govern tierCertified since 6 Oct 2026 · Valid until 6 Oct 2027

Certification ID: RAIA-2026-0012

2026 cohort: certified ahead of the Australian Standards for AI

block8.ai

Trust seal

Verified live against the certification register

Responsible AI Australia Govern certification markVerifying against the register…
TierGovern
Certification IDRAIA-2026-0012
Expires6 Oct 2027
View signed credential (AATC)How this verification works

In plain English

The AI Transparency Card is the one-screen version of this entry: what Block8.ai uses AI for, whether it makes decisions about you, who oversees it, and how to question a decision. The assurance pack is the same record arranged for a supplier questionnaire.

Open the card Assurance pack (PDF)

For AI agents

This certification is machine-verifiable. Any AI agent, search engine or procurement system can confirm it in milliseconds, no account required.

RAIA-2026-0012
Verify via APISigned credential (AATC)How machine-verifiable certification works

Responsible AI profile

Self-declared AI practices, submitted as part of this business's certification.

AI usage

How they use AI

Block8.ai is an Australian-developed, AI-powered penetration testing platform that helps organisations identify and validate exploitable security vulnerabilities across authorised systems and applications. The platform combines AI-driven testing with defined governance and oversight controls, with expert human validation available through its human-in-the-loop service. Block8.ai is a CREST-Accredited Company and holds ISO/IEC 27001:2022 certification.

AI tools in use

Chatbots or virtual assistants (e.g., customer service)Automation or robotic process automation (RPA) (e.g., workflow efficiency)Natural language processing (e.g., content generation or sentiment analysis)Other (specify briefly)

Pre-built models & their purpose

AI-powered penetration testing to identify, assess and validate exploitable security vulnerabilities within authorised client environments.

AI use & risk profile

Low-risk (e.g., internal automation or content generation)Medium-risk (e.g., customer recommendations or marketing)

Risk & safety

How they identify and mitigate AI risk

Block8.ai manages AI-related risks through its established information security and risk management processes. These include documented policies, defined responsibilities, risk assessments, authorised testing boundaries, human oversight and review of relevant controls. AI-related risks are assessed and managed through our internal governance framework, supporting responsible and accountable use of AI in penetration testing.

Fairness audits & human-in-the-loop review

Yes

Frequency & method

Block8.ai incorporates human oversight into its AI governance and testing processes. Expert human validation is available through our human-in-the-loop penetration testing service, providing additional review of findings and recommendations. The level of human involvement depends on the service and testing requirements.

Ability to contest or override AI decisions

Yes

Example

Block8.ai's testing processes incorporate defined oversight and intervention controls. Human reviewers can assess AI-generated findings and exercise professional judgement as part of the applicable testing and validation process.

Ethics & governance

Follows ethical AI frameworks

Yes

Frameworks followed

Internal company policyAustralian AI Ethics PrinciplesInternational standards (e.g., EU AI Act guidelines)

Maintains AI documentation & oversight

Yes

Responsible for oversight

CEO

Privacy & fairness

Privacy & data security (Privacy Act 1988)

Yes

Methods

Data encryption and anonymizationRegular security auditsCompliance with Privacy Act via data impact assessmentsThird-party tools (e.g., secure cloud providers)

Prevents AI bias & discrimination

Yes

Methods

Other (specify)

Other methods

Block8.ai's AI platform is used for authorised technical security testing rather than making decisions about individuals. Responsible AI considerations therefore focus on testing accuracy, consistency, appropriate system access, privacy, security safeguards and accountability.

Sustainability & society

Societal benefit & responsible scaling

Block8.ai contributes to stronger cyber resilience by making professional penetration testing more accessible to organisations of different sizes, including businesses that may not have extensive internal cybersecurity resources. By combining AI-powered testing with defined safeguards, human oversight and practical reporting, Block8.ai aims to help organisations better understand their vulnerabilities and prioritise improvements as the technology scales responsibly.

Certification history

Certified for 1 month. Everything below is on the public record. Purple entries are verified by Responsible AI Australia; amber entries are declared by the business.

  1. 30 October 2026

    Public profile updated

    9 answers changed after review by Responsible AI Australia.

  2. 6 October 2026

    Certified at the Govern tier

    Assessed by Responsible AI Australia against Australia's AI Ethics Principles.

Run a business that uses AI? See how certification works.