VAP Extension Framework

Industry Accountability Profile (IAP)

Sector-specific Accountability Extensions for VAP

IAP adapts VAP to industry-specific regulatory and operational requirements,

defining sector-tailored accountability profiles for AI audit trails, governance, and compliance.

IAP is an extension layer on top of VAP — it does not modify the VAP Core specification.

What is IAP?

Understanding the role of Industry Accountability Profiles in the VAP ecosystem

Definition

IAP (Industry Accountability Profile) is an extension profile that defines industry-specific accountability, audit trail, retention, and governance requirements on top of the VAP Core specification.

Key Concept

IAP is NOT a new standard.
IAP IS a constraint/supplementary specification that assumes VAP compliance as a prerequisite.

What IAP Defines

Mandatory Event Types

Industry-specific events that must be recorded

Retention Period Policies

How long audit trails must be preserved

Audit Trail Granularity

Time precision and accountability party requirements

Regulatory Compliance Metadata

Jurisdiction-specific compliance fields

VAP and IAP Relationship

A layered architecture for universal and industry-specific AI accountability

VAP Core

Common Core (Industry-Agnostic)

Universal requirements for cryptographically verifiable AI decision provenance — applicable across all domains.

extends (constraints/supplements)

IAP (Industry Accountability Profile)

Industry-Specific Extension Layer

Sector-tailored constraints and supplementary specifications built on top of VAP Core.

implementation examples

IAP-FIN

Finance

IAP-INS

Insurance

IAP-MED

Healthcare

IAP-MOB

Mobility

IAP-SEC

Securities

IAP Layers on Top of VAP

IAP profiles add industry-specific requirements without modifying the VAP Core. Think of it as "VAP + industry constraints."

Existing VAP Implementations Remain Valid

Organizations with VAP-compliant systems can adopt IAP profiles incrementally — no need to rebuild from scratch.

Why IAP is Needed

The rationale behind industry-specific accountability profiles

Different Regulatory Requirements by Industry

Retention periods, explanation obligations, and approval processes vary significantly across sectors. Financial services may require 5-7 years of audit trail retention, while healthcare has different HIPAA-driven requirements.

Industry-Specific AI Usage Contexts

AI in algorithmic trading operates in milliseconds; AI in medical diagnosis requires different granularity. The context of AI usage differs fundamentally across industries.

Single AI Audit Spec Creates "Excess or Deficit"

A one-size-fits-all specification inevitably creates over-engineering for some industries and insufficient coverage for others. IAP solves this through targeted profiles.

IAP Balances "Commonality" and "Fit"

By maintaining VAP Core as the common foundation while allowing industry-specific extensions, IAP achieves both interoperability and sector-appropriate compliance.

Expected IAP Examples

Industry-specific profiles currently under development or planned

IAP-FIN

Finance & Capital Markets

Trading systems, AI models, regulatory reporting, algorithmic trading audit trails.

In Development

IAP-INS

Insurance & Actuarial

IFRS 17, Solvency II, claims processing, internal model governance.

Planned

IAP-MED

Healthcare

AI diagnostics, medical records, accountability parties, FDA SaMD guidance.

Planned

IAP-MOB

Mobility & Autonomous Driving

Decision logs, liability boundaries, accident analysis, UNECE R157 compliance.

Planned

IAP-SEC

Securities

MiFID II RTS 25, market surveillance, trade reconstruction, best execution.

Planned

More Profiles

Coming Soon

Additional industry profiles will be developed based on stakeholder feedback and regulatory developments.

IAP Standardization Policy

Governance principles for Industry Accountability Profiles

VSO Governance

IAP profiles are developed and maintained by VeritasChain Standards Organization (VSO), ensuring consistent quality and cross-profile compatibility.

Vendor Neutral

IAP specifications do not assume or favor specific companies or products. They are designed to be implementable by any compliant system.

Stakeholder-Driven Evolution

IAP profiles evolve through consultation with industry participants, regulatory authorities, and technical experts to ensure practical applicability.

Separate from Implementation & Certification

IAP defines requirements only. Implementation choices and certification processes are handled by separate entities.

Get Involved in IAP Development

Help shape industry-specific accountability standards for AI systems in your sector.

Contact: info@veritaschain.org

Related Resources