Home/Governance
Governance & compliance

We run our company the way we build our systems.

Structured, auditable, and accountable — by design. The same discipline that governs the software we build also governs how Softvorx itself is owned, decided, and held to account.

Request our compliance statement Federal credentials
Company & ownership

Texas-formed. Woman-owned. Accountable.

01Formed 2019 · TexasIncorporated April 14, 2019.
02100% woman-ownedSole owner: the CEO.
03Sole executiveOne clear line of authority.

Softvorx Inc. was incorporated in Texas on April 14, 2019, and restructured under current CEO authority on December 19, 2025.

The company is 100% woman-owned: Ruquia Shah has held 100% of the shares since the December 19, 2025 restructuring. As CEO she holds sole executive and financial authority; CIO Ikram Shah leads technical execution and platform engineering under CEO direction.

Clear ownership and a single line of accountability are deliberate — governance starts with knowing exactly who decides.

SBA Certified Women-Owned Small BusinessSBA Certified Economically Disadvantaged Woman-Owned Small Business
Certified August 17, 2026 · renewal August 2029
How we govern AI

Guardrails before tools — on the record.

Every system we build runs inside a data-classification policy: what data may touch which class of AI, a human at every gate, and an audit trail by default. These principles govern our own work and the work we do for clients alike — mapped to real controls below.

See the discipline applied end to end in how we build our own systems.

NIST AI Risk Management Framework (RMF) · how alignment shows up

Govern, Map, Measure, Manage — mapped to real controls.

We don’t just name the framework. Each function maps to a mechanism in how the product and the company actually operate — and we mark what is in place versus in preparation.

NIST AI RMF · controls
9 of 12 in place

Govern — accountability & policy

Single line of authority100% woman-owned; the CEO holds sole executive and financial authority — governance starts with knowing who decides.In place
Written AI-use policyData minimization, purpose limitation, tool authorization, human gates, audit-everything — published on this page.In place
Named gate ownersEach decision gate has a defined human role accountable for it.In place

Map — context & data classification

Data-classification policyWhat data may touch which class of AI is defined before any tool is approved.In place
Identifiable student data never leaves the districtIdentifiable student data stays in the school’s systems; only de-identified metrics reach AI.In place
Field-level data mapA documented map of what is tokenized, stripped, or redacted before any AI call.In preparation

Measure — evidence & metrics

Numeric-baseline enforcementNo annual Individualized Education Program (IEP) goal saves without a numeric baseline and progress metric (Individuals with Disabilities Education Act §614(d)).In place
Tamper-evident audit trailEvery create / access / change / share is append-only, logged, and exportable.In place
Model-behavior evaluationStructured evaluation of AI outputs against spec before release.In preparation

Manage — risk response & control

A human at every gateAI never has the last word at a risk point; an educator approves before any use.In place
Tool authorizationOnly reviewed, approved AI tools — with agreements where required.In place
Incident response & rollbackA documented process to disable a tool and reverse an action on signal.In preparation

A full RMF profile document is in preparation; this section summarizes the controls behind our alignment claim. Available to reviewers on request — hello@softvorx.io.

Compliance posture

What we hold today, and what’s in preparation.

We document ownership, governance, and operational records aligned with each standard we pursue — and we never claim a credential before it’s issued.

  1. 01SBA WOSB & EDWOSB (federal) — Certified August 17, 2026; renewal August 2029.
  2. 02WBENC (national private) — Under review; application submitted August 17, 2026, expected November 2026.
  3. 03Additional state and local certifications under evaluation.
See the full compliance roadmap About & leadership
Disclosures & Public Documents

Open by default.

The documents that explain how we use AI, protect data, and operate — available for partners, reviewers, and the public.

  1. 01How Softvorx Uses AI · in preparation
  2. 02Student-privacy (FERPA) Compliance Statement · in preparation
  3. 03Privacy Policy · in preparation
  4. 04Terms of Service · in preparation
  5. 05Capability Statement · in preparation

Available to partners and reviewers on request while we finalize them — hello@softvorx.io.

Questions about governance?

Ask us anything about how we’re structured.

For grant reviewers, State agencies, and partners — we’re glad to walk through our governance, ownership, and compliance posture in detail.

Request a conversation Impact & Partnership