PACT ProSCAPE Compliance & Certification Disclaimer

PACT ProSCAPE is a software platform provided by HummingBird Technosys, Inc., ("HummingBird"), to assist organizations with development lifecycle management, process execution, artifact management, requirements traceability, verification, reviews, configuration management, evidence management, and activities associated with safety, quality, assurance, regulatory, and certification processes.

1. Compliance Enablement - Not Certification

PACT ProSCAPE is intended to enable, facilitate, and support compliance and certification-related activities.

PACT ProSCAPE does not itself certify, approve, authorize, assess, validate, or warrant that any product, system, software, hardware, organization, development process, project, artifact, evidence package, or regulatory submission complies with a particular standard, regulation, certification basis, guidance document, contractual requirement, or approval criterion.

Use of PACT ProSCAPE does not guarantee certification, regulatory approval, compliance, assessor acceptance, or successful completion of an audit.

Responsibility for establishing and demonstrating compliance remains with the organization seeking certification, approval, assessment, or acceptance.

2. Customer and User Responsibility

Customers and users remain responsible for:

• identifying applicable laws, standards, regulations, certification objectives, contractual requirements, and guidance;

• establishing the appropriate certification or compliance basis;

• determining applicable assurance, design-assurance, safety-integrity, or criticality levels;

• configuring PACT ProSCAPE appropriately;

• establishing and following appropriate lifecycle, development, verification, safety, security, quality, and configuration-management processes;

• ensuring project data and artifacts are accurate, complete, current, and appropriate;

• ensuring reviews and approvals are performed by properly qualified and authorized personnel;

• determining whether generated artifacts, reports, traceability information, evidence, and records satisfy applicable requirements;

• exercising appropriate engineering and professional judgment;

• identifying and resolving deficiencies, anomalies, findings, gaps, and nonconformities; and

• obtaining approval from applicable customers, assessors, certification authorities, regulators, designated representatives, or other authorities.

Automated checks, AI-assisted functions, templates, workflows, reports, traceability analyses, dashboards, recommendations, and other PACT ProSCAPE functionality should be reviewed by appropriately qualified personnel before being relied upon for safety, certification, compliance, engineering, or regulatory decisions.

3. Standards and Frameworks Referenced

PACT ProSCAPE may provide functionality intended to assist activities associated with standards, guidance, regulations, or frameworks including, without limitation:

• DO-178C - Software Considerations in Airborne Systems and Equipment Certification;

• DO-254 - Design Assurance Guidance for Airborne Electronic Hardware;

• ARP4754A and subsequent or related system-development guidance;

• DO-278A - Software Integrity Assurance Considerations for Communication, Navigation, Surveillance and Air Traffic Management Systems;

• ISO 26262 - Road Vehicles - Functional Safety;

• Automotive SPICE;

• IEC 61508 - Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems;

• applicable railway software and safety standards;

• IEC 62304 - Medical Device Software;

• ISO 14971 - Medical Device Risk Management;

• applicable ECSS standards; and

• other development, functional-safety, security, quality, assurance, and regulatory standards.

References indicate areas in which PACT ProSCAPE may assist customers in organizing, managing, executing, tracing, reviewing, documenting, or presenting information associated with applicable processes and objectives.

Such references do not mean that PACT ProSCAPE itself has been certified under, approved under, qualified under, or independently determined to comply with a referenced standard unless HummingBird expressly states so in written product documentation applicable to a specific release.

4. No Affiliation, Sponsorship, or Endorsement

Unless expressly stated otherwise, HummingBird Technosys, Inc. and PACT ProSCAPE are not affiliated with, sponsored by, endorsed by, certified by, or approved by:

• RTCA;

• EUROCAE;

• SAE International;

• ISO;

• IEC;

• FAA;

• EASA;

• FDA;

• VDA;

• certification authorities;

• regulatory authorities;

• accreditation organizations;

• assessment organizations; or

• other third-party standards or regulatory organizations referenced by HummingBird.

Third-party names, acronyms, standards, trademarks, and intellectual property remain the property of their respective owners.

5. Standards Are Controlled and Copyrighted Documents

PACT ProSCAPE is not a substitute for authorized copies of applicable:

• standards;

• regulations;

• advisory material;

• certification specifications;

• regulatory guidance;

• compliance interpretations; or

• contractual requirements.

Customers are responsible for obtaining properly licensed, authorized, and current versions of applicable materials and for determining which revisions, interpretations, and requirements apply to their programs.

HummingBird does not grant any license to copyrighted third-party standards merely by referring to those standards or by providing functionality intended to facilitate their implementation.

6. Templates, Checklists, Process Models, and Compliance Mappings

PACT ProSCAPE may provide:

• templates;

• checklists;

• process models;

• lifecycle workflows;

• compliance mappings;

• objectives;

• sample artifacts;

• review workflows;

• verification structures;

• process guidance; and

• other implementation aids.

These materials are intended to facilitate development and assurance activities and may require adaptation for:

• the customer's lifecycle;

• development methodology;

• certification basis;

• assurance level;

• safety-integrity level;

• product architecture;

• standard revision;

• means of compliance;

• regulatory jurisdiction;

• certification-authority expectations;

• project-specific considerations; and

• contractual requirements.

No template, checklist, mapping, workflow, or process model should be considered universally sufficient to establish compliance.

7. Traceability and Generated Evidence

PACT ProSCAPE may generate, organize, maintain, or report:

• requirements traceability;

• verification traceability;

• compliance matrices;

• lifecycle artifacts;

• review records;

• approval records;

• baselines;

• configuration records;

• verification results;

• dashboards;

• metrics;

• compliance information;

• audit histories; and

• evidence packages.

Completeness and validity of these outputs depend upon factors including:

• completeness and correctness of source data;

• configuration of the applicable project;

• artifact relationships;

• assigned attributes;

• applicable compliance mappings;

• workflow configuration;

• user actions;

• reviewer actions;

• approvals; and

• customer-defined processes.

A report or status identified by PACT ProSCAPE as "complete," "covered," "traceable," "audit-ready," "certification-ready," or similar describes a status based on configured platform information and logic.

Such a status does not independently establish that an auditor, assessor, regulator, customer, or certification authority will accept the underlying evidence or determine the project compliant.

8. Electronic Signatures, Reviews, and Approvals

Where PACT ProSCAPE provides electronic-signature, approval, identity, attribution, timestamping, workflow, or review-record functionality, customers remain responsible for determining whether the functionality, its configuration, authentication mechanisms, identity controls, operational procedures, record retention, and associated administrative processes satisfy applicable legal, contractual, regulatory, certification, security, and evidentiary requirements.

9. Artificial Intelligence and Human-in-the-Loop Capabilities

PACT ProSCAPE may incorporate artificial-intelligence-assisted, machine-learning, generative-AI, agentic, or other automated functionality intended to assist users with activities such as:

• artifact generation;

• artifact analysis;

• requirements analysis;

• traceability;

• process guidance;

• consistency checking;

• review assistance;

• compliance-gap identification;

• evidence analysis;

• workflow assistance;

• recommendations; and

• documentation.

AI-generated or automated output may be incomplete, inaccurate, inconsistent, outdated, or inappropriate for a particular project or certification objective.

AI-assisted functionality is intended to augment qualified human judgment, not replace it.

Organizations remain responsible for reviewing, validating, approving, and controlling AI-assisted outputs in accordance with applicable lifecycle and assurance processes.

No AI-generated or automated output should be relied upon as the sole basis for:

• a safety-critical engineering decision;

• compliance determination;

• safety assessment;

• verification conclusion;

• certification conclusion;

• regulatory representation; or

• operational safety decision.

10. "Human-in-the-Loop" Does Not Transfer Responsibility

PACT ProSCAPE may provide human-in-the-loop workflows in which qualified users review, approve, reject, modify, or otherwise disposition AI-generated or automated content.

The availability of such workflows does not itself establish compliance with a standard or regulator expectation concerning the use of artificial intelligence.

Customers remain responsible for defining appropriate human review, independence, qualification, authorization, verification, configuration management, and approval processes.

11. Audit-Ready, Certification-Ready, and Continuous-Compliance Terminology

Terms used by HummingBird such as audit-ready, certification-ready, compliance-ready, continuous compliance, compliance coverage, automated compliance, certification evidence, and similar terminology describe product capabilities intended to help organizations prepare, organize, maintain, analyze, or present applicable information and evidence.

These terms do not constitute a guarantee that:

• an audit will result in no findings;

• an assessor will determine a process compliant;

• a regulator or certification authority will accept particular evidence;

• a customer will accept a deliverable;

• a product will receive certification; or

• a program will receive regulatory approval.

12. Safety-Critical Use

PACT ProSCAPE is a development lifecycle, engineering-process, artifact-management, and compliance-support platform.

Unless expressly agreed otherwise in a written agreement executed by HummingBird, PACT ProSCAPE is not intended to:

• directly perform an operational safety function;

• directly control safety-critical equipment;

• act as a flight-control system;

• act as a vehicle-control system;

• act as a medical-device safety function; or

• serve as the sole mechanism upon which the safe operation of safety-critical equipment depends.

This includes aircraft, spacecraft, vehicles, medical devices, railway systems, industrial systems, defense systems, autonomous systems, or other safety-critical equipment.

13. Security, Government, and Export-Controlled Environments

PACT ProSCAPE may be capable of deployment in environments supporting:

• aerospace programs;

• defense programs;

• government programs;

• export-controlled development;

• proprietary development;

• sensitive intellectual property; or

• other regulated activities.

Availability of deployment capabilities does not automatically make a customer's environment compliant with:

• ITAR;

• EAR;

• CMMC;

• NIST requirements;

• FedRAMP;

• DFARS;

• government cloud requirements; or

• other security, export-control, or governmental requirements.

Compliance depends upon the specific deployment architecture, hosting environment, cloud provider, data, export classification, personnel, authorization model, citizenship or nationality requirements where applicable, network configuration, access controls, operational processes, cybersecurity controls, contracts, and customer implementation.

Customers are responsible for identifying and implementing requirements applicable to their environments.

14. Regulatory, Standards, and Guidance Changes

Standards, regulations, interpretations, certification guidance, and industry practices change over time.

HummingBird may periodically update PACT ProSCAPE functionality, workflows, mappings, templates, and associated content.

HummingBird does not warrant that website descriptions, templates, compliance mappings, workflows, or product content will at all times reflect every regulatory interpretation, industry interpretation, authority position, amendment, errata, certification-policy change, or revision to a standard.

Users should verify applicable requirements against current and authoritative sources.

15. Customer Configuration

PACT ProSCAPE is configurable.

The effectiveness and appropriateness of the platform for a particular program may depend significantly upon customer configuration.

Changes to workflows, roles, permissions, templates, compliance mappings, lifecycle data, project settings, integrations, reporting rules, or other configurations may affect the accuracy, completeness, integrity, or appropriateness of compliance information produced by the platform.

Customers remain responsible for configuration control and validation appropriate to their use case.

16. No Professional Advice

Information provided through the PACT ProSCAPE website, demonstrations, sales presentations, templates, documentation, sample projects, generated outputs, or the PACT ProSCAPE software does not constitute legal, regulatory, certification, safety, cybersecurity, export-control, or other professional advice.

Organizations should consult qualified professionals and applicable authorities regarding requirements relevant to their particular products and programs.

17. Contact

Questions concerning PACT ProSCAPE compliance and certification capabilities may be directed to:

HummingBird Technosys, Inc.

PACT ProSCAPE
4 Venture Ave, Suite #220
Irvine, CA 92618, United States
Phone: +1 (949) 238-2200
Email: pactsupport@hummingbird-tek.com