CSA AI Trustworthy Pledge

What the CSA AI Trustworthy Pledge is

The Cloud Security Alliance (CSA) is a nonprofit organization that publishes best-practice guidance for cloud and AI security. Its AI Trustworthy Pledge asks organizations that build or operate AI systems to publicly affirm alignment with four principles: safety, transparency, ethical accountability, and privacy in AI systems.

The pledge mark

This is the mark CSA issues to organizations that have signed the pledge. Unlike the SSM BizTrust QR code, there is no scan-to-verify step here — the mark itself is not proof of anything; OtomoAI is listed in CSA's own signatory directory, linked below; that directory is the only place to check.

Cloud Security Alliance
AI Trustworthy Pledge, 2026
Listed signatory

What OtomoAI committed to

By signing, OtomoAI affirmed alignment with those four principles as they apply to the automation we build for our customers. In concrete terms, tied to what this product actually does:

• Safety — the AI systems behind your automation are scoped to the tasks you asked us to build (answering enquiries, scheduling, document handling), not given open-ended access beyond that scope.
• Transparency — we publish, in plain language, what data your automation sends to AI providers and why, in our Zero Data Retention page, rather than leaving that as an internal detail.
• Ethical accountability — we treat you, not the AI provider, as the one who decides what your automation collects and why (see "Who decides what happens to your data" on the same page), and we remain accountable to you for how the automation we built behaves.
• Privacy — how we collect, use, and protect personal data is set out in our Privacy Policy, under Malaysia's Personal Data Protection Act 2010.

What this is not

Signing the pledge is a self-affirmation of alignment with CSA's stated principles. It is not an audit, a certification, or a third-party assessment of our systems. CSA publishes the list of organizations that have signed; CSA does not inspect signatories' systems, processes, or code to verify the affirmation. That is a real difference from our SSM BizTrust verification, where SSM checks a registration fact against its own government records — a reader should know which of the two they are looking at.

OtomoAI appears in CSA's published list of signatories. To find us there yourself: open CSA's list of AI Trustworthy Pledge signatories, scroll to the grid of organization logos, and look for the black square tile with the OtomoAI mark. That listing shows we signed; it does not mean CSA inspected anything.

Questions

For anything about this pledge or how it relates to our other credentials, see our Trust & credentials page, or email enquiry@otomoai.com.my.