# govrn — Messaging & Positioning Brief (canonical)
*The independent-attestation repositioning. 2026-07-02. This is the single source of truth for govrn copy.*

## The one-liner (use verbatim where a tagline is needed)
> **govrn is the independent standard for AI-governance attestation — across every cloud, model, and agent, no matter who built them.**

## The position, in one paragraph
The platforms now ship their own AI governance — Microsoft **Agent 365** + **Purview** give enterprises an agent registry, monitoring, and self-scored ISO 42001 / NIST AI RMF / EU AI Act readiness. That is real, and it commoditized the *inventory-and-monitoring* layer. What no platform can provide is the thing a board, a regulator, an insurer, and an enterprise customer actually require: an **independent, signed attestation** from a body that does **not** also sell the agents and the cloud. **You cannot certify your own control plane.** Microsoft proves it — Microsoft certifies its *own* AI with an *independent* ISO 42001 auditor. **govrn is that independent, vendor-neutral, board-grade attestation** — spanning every cloud, model, and agent, not one vendor's estate.

## The reframe rules (apply everywhere)
| Old framing (retire it) | New framing (lead with it) |
|---|---|
| "AI inventory + monitoring + dashboard" as the headline | Inventory/monitoring is **evidence collection that feeds independent attestation** — a means, never the headline. |
| "Most governance stops at security / not just security" | "Most governance is a vendor grading its own AI. Real governance is **independent**." |
| "See everything / you cannot govern what you cannot see" | "Prove it — with a **signed, independent attestation** a board and regulator will accept." |
| "a living standard for AI governance" | "the **independent standard for AI-governance attestation**" |
| "across your entire technology estate, not just security" | "across **every cloud, model, and agent, no matter who built them**" (this is the cross-vendor breadth) |
| pricing as "fractional FTE / a fraction of the cost" | **fixed-fee, predictable, board-grade** — never "cheap" |

## Keep (these get *stronger*, not weaker)
- **Independence architecture** — the body that builds/runs is structurally separate from the body that attests. This is now the core product, not a footnote.
- **The framework anchor** — NIST AI RMF (Govern/Map/Measure/Manage), ISO/IEC 42001, EU AI Act, OWASP, MITRE ATLAS, CSF. govrn operationalizes the standards the field already trusts.
- **Whole-estate breadth** — reframed as cross-vendor (every cloud/model/agent), which is the differentiator vs. single-vendor platform governance.
- **Complementary-to-platform** — govrn **consumes** Agent 365 + Purview telemetry as evidence and adds the attestation on top. Agent 365 is a data source, not a competitor. Never position against the platform.

## Voice (unchanged — govrn "The Standard")
Institutional, confident, spare. Black-and-white. Hierarchy by size, never faux-bold. Sentences that feel inevitable. No hype, no AI-slop.

## Do NOT touch
Page structure, CSS, `<script>`, gate logic, access keys, `noindex`, or the design system. This is a **copy** pass only — headlines, ledes, body prose, meta descriptions, section subheads.