What exactly is AiVIS Cite Ledger?

AiVIS Cite Ledger is an evidence-backed AI citation audit and remediation system. It measures how AI models , ChatGPT, Perplexity, Claude, and Google AI , interpret, trust, and cite your web content. The result is a 0–100 CITE LEDGER score across seven weighted dimensions, with BRAG evidence-linked findings and prioritized fixes.

How is this different from Semrush, Ahrefs, or Clearscope?

Traditional SEO tools optimize for keyword ranking in traditional search results. AiVIS Cite Ledger audits citation readiness , the specific signals that determine whether AI answer engines retrieve and cite your content. A page can rank #1 on Google and be completely invisible to AI answer synthesis.

What is BRAG and how does it make findings trustworthy?

BRAG stands for Based-Retrieval-Auditable-Grading. It ties every audit finding to a real, traceable element on your page , a specific heading, schema block, meta tag, or content section , each carrying a unique evidence ID. You can open the element, verify the finding, and recheck it after a fix. No black boxes.

Is the free tier genuinely useful, or just a teaser?

The Observer (free) plan gives you a full composite CITE LEDGER score and all seven dimension letter grades , so you can see exactly where you stand and which categories are hurting you. BRAG evidence IDs and prioritized fix packs require a paid plan. Three audits per month, no credit card.

Is AiVIS Cite Ledger GDPR compliant?

AiVIS Cite Ledger follows GDPR-aligned practices including minimal data collection, encryption, user data export and deletion rights, and transparent retention policies.

Where is AiVIS Cite Ledger data stored?

Data is stored in managed PostgreSQL (Neon) with TLS encryption at rest and in transit. Infrastructure is hosted on Render.

Does AiVIS Cite Ledger have SOC 2 certification?

AiVIS Cite Ledger is on a SOC 2 Type I readiness path with controls covering access management, incident response, and change management.

Compliance & Security | AiVIS Cite Ledger

AiVIS Cite Ledger compliance and security posture, including GDPR operations, controls, and SOC roadmap status.

TLDR

The Compliance page documents AiVIS Cite Ledger security and privacy posture so crawlers can associate the brand with concrete GDPR controls, data handling practices, and compliance commitments.

What the compliance page covers

AiVIS Cite Ledger processes website audits, competitor comparisons, and citation tests on behalf of authenticated users. The compliance page explains the controls in place for data collection, storage, retention, and deletion as well as the GDPR-aligned practices the platform follows.

This includes encryption at rest and in transit, minimal data collection principles, role-based access control, audit logging, and a clear data retention policy that gives users control over their information.

Security controls and SOC roadmap

Infrastructure runs on Render with managed PostgreSQL (Neon) and Redis. All connections use TLS. Server-side security middleware includes Helmet headers, Content Security Policy with nonce-based script loading, DOMPurify sanitization, and Zod input validation.

The platform is on a SOC 2 Type I readiness path. Current controls cover access management, incident response procedures, vulnerability scanning, dependency auditing, and change management through version-controlled deployments.

GDPR data subject rights: export, correction, and deletion requests honored within 30 days.
No client-provided API keys accepted on the analysis endpoint , credentials stay server-side.
URL validation blocks private and localhost targets in production to prevent SSRF.
All user inputs pass through DOMPurify and Zod schemas before persistence.