For government contractors
Selling AI to government? Prove it's governed — before the bid is due.
US federal agencies now write AI governance into contracts under OMB M-25-22. Canadian federal institutions apply the Directive on Automated Decision-Making to every system they buy. Statute OS produces the evidence your agency client will ask for.
🇺🇸 US federal — OMB M-25-21 & M-25-22
Contracts under solicitations issued from Sep 30, 2025
- M-25-22 §3(e)(iv)Proof that non-public agency data and outputs never train public or commercial models
- M-25-22 §4(c)(i)Documentation the agency needs to complete its AI impact assessment
- M-25-22 §4(d)(E)Testing procedures and support for independent evaluation on agency-held data
- M-25-22 §4(d)(C)Data and model portability, knowledge transfer, clear licensing (no lock-in)
- M-25-21 §4(b)Pre-deployment testing, ongoing monitoring, human oversight, fail-safes, appeals
🇨🇦 Canada federal — Directive on Automated Decision-Making
Applies to all systems since June 24, 2026, including procured ones
- DADM 6.1Inputs the department needs to complete and publish its Algorithmic Impact Assessment
- DADM 6.2.3Plain-language explanations of how and why each decision was made
- DADM 6.2.6Access, testing and external audit rights over every released version
- DADM 6.3.1Pre-production testing for accuracy, unintended bias and human-rights impacts
- DADM 6.3.13Human involvement — at impact level III+, a human makes the final decision
From questionnaire to contracting officer
- Step 1
Describe the system
Answer the intake questionnaire and select “Public sector / government”. US, Canada, or both.
- Step 2
Connect or upload
Read-only metadata scans of your AI platforms, plus your existing policies, test reports and contracts. We never copy your data.
- Step 3
See the gaps
Every requirement mapped to the exact memo section or directive clause, ranked by severity.
- Step 4
Hand over the Evidence Pack
A buyer-ready ZIP: executive summary, control map, evidence index, remediation plan and attestation — ready for the contracting officer.
Built for sensitive environments
- Zero-copy. Scanners read metadata and audit views only — never raw data. Do not upload CUI or classified information.
- Tamper-evident audit trail. HMAC-chained log of every action.
- Two-factor authentication and per-organization data isolation.
- Canadian company (TOM projet inc., Quebec). A Canada-resident hosting option is being set up — ask us for timing.
Statute OS produces compliance documentation and evidence; it is not legal advice and does not replace the agency's own assessment or authorization to operate.
Have a bid due?
Send us the solicitation number. We'll map its AI requirements and show what your Evidence Pack would contain.
hello@thyneconsulting.com