Versatile AI Risk Assessment Edition Release
============================

Product           : Versatile AI Risk Assessment
Package version   : 3.27.1
Edition           : community
Display name      : DSGVO-Check Community Edition
Brand             : vara
App title         : Versatile AI Risk Assessment
Built at          : 2026-10-25T09:45:23.267Z

License scope
-------------
Use               : personal and expressly permitted non-commercial use
Business use      : no
Commercial use    : no
Report distribution: noncommercial-only

Included capabilities
---------------------
Watermark         : Erstellt mit Versatile AI Risk Assessment Community Edition
Portfolio         : not included
Threat profiles   : not included
Project file      : included
Business/revenue use: not permitted
Backend/telemetry : no configured Versatile AI Risk Assessment backend or telemetry

Hashes
------
index.html              sha256:b78395d86ecd30329c2ef952ee92879e7ce7acfa96eedb6b0e6a5202677f28cd
EULA.md                 sha256:027b6e73f8c365897aba9e6f3dc30b56190456ab7ff99eb585e1ae5e8590ce46
nachweise/LEGAL-PRODUCT-NOTES.md sha256:aeb602f2272b26d8a8b255f432928e5616033cbf0d9414af125e87b369c06a53
nachweise/SUPPLY-CHAIN.md sha256:3a13e573b1153665be91ab697cb147ee092977f36f6552726f7b93f98a41fdda
nachweise/SECURITY.txt  sha256:a72a3ec43478582a1ed0efc771f9bf7bb7b9720f960227e573941e1fb65ddd0d
nachweise/NOTICE.md     sha256:0675bdef4d6e19cd51c22f10a5500a5ae13d3250733ae4da8bc8c8dfbaff3bbb
nachweise/THIRD_PARTY_LICENSES.md sha256:3b30bdb969c65836cd76f40bc525a5dd0dfcef5c070c374dea181fa7be2c0ccc
nachweise/ANBIETERKENNZEICHNUNG.md sha256:a4ab7d5e5cb176a201e3e2cee7497d2a2358553cad81157ddd6e267513f9595b
nachweise/DATA-PROTECTION-NOTES.md sha256:3b94780e46fc5d226081a5d2d356b97456465cb3546d777495d9107623c9c0d3
nachweise/AI-ACT-STATEMENT.md sha256:1d58a20b0948db1a828cb649d2f5c346f80f5027d2fdb778381ddd077c8e338f
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf sha256:709668e95f80449552904abaec4a3ba1bb9ffec683b8bb261f557a21230fc67e
nachweise/CONTENT-ASSURANCE-SUMMARY.md sha256:a76ac07244e88e54ae7f541c85657f316e72f88a45c43a590e02e787cee6cc62
nachweise/VULNERABILITY-AUDIT.md sha256:285daf4e8d0d67b497dcaa1599248dbc3ca9c9e49200ff9bf6cebc2c0c787b8b
nachweise/NPM-AUDIT-SUMMARY.json sha256:0b46f02248d03f572adb3764a91af5c76c2e0de9834c0739426cfb237a774f58
nachweise/GRYPE-SBOM-SCAN.json sha256:fa7588b6b4421fad3ece902c4cd02d6741507ab8ce075b958459dde61d729ae7
nachweise/GRYPE-SBOM-SCAN.md sha256:4a9e54c33055ac8f105ea6ae641bc3857e8b1814ec092060cecc9ecbd712f34b
nachweise/COMMUNITY-GOVERNANCE.md sha256:fc4be2011d2e59df810f443e63091d509e6a12ae0779bb9c740ba43a734aee84
nachweise/COMMUNITY-FEEDBACK-FORM.md sha256:f2d6df9a3bff5294d833eed39919c9972c0b1e928973ef230e1d1ccd8242b194
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md sha256:ca74576e24c845b7ec1792b15716f20304451f49d67d69dac2c70c01953fd439
nachweise/SECURITY-REPORT-FORM.md sha256:82f0f33865ea21a86bfbeb74e76da6a354b749e38d5b4881d8d3bfc30546b387
nachweise/SBOM.cdx.json sha256:f1db7deda1d015041c328704e49a996105f6e700170b17c5234c1071ad078505
nachweise/VEX.cdx.json  sha256:1a1a30a87ce13d0ec36b8335ec8dc475748e4426ea72d85fc2aa6634b32996d9
readme.txt              sha256:d8dceb614bcac0a76248792f24a577ac2853ee2dd2024122c023776e50018534
favicon.svg             sha256:1e7ae4c5edfd30877b624350badeefaa14d24b438019951f342797e1c30ea4ec

SBOM vulnerability scan
-----------------------
Status            : passed
Scanner           : anchore/grype 0.120.1
Database          : schema v6.1.10, built 2026-10-25T06:27:34.000Z
Findings          : 0 (blocking 0)
Evidence          : GRYPE-SBOM-SCAN.md, GRYPE-SBOM-SCAN.json

Companion files
---------------
nachweise/RELEASE.txt
nachweise/LEGAL-PRODUCT-NOTES.md
readme.txt
nachweise/SUPPLY-CHAIN.md
nachweise/SECURITY.txt
nachweise/NOTICE.md
nachweise/THIRD_PARTY_LICENSES.md
EULA.md
nachweise/ANBIETERKENNZEICHNUNG.md
nachweise/DATA-PROTECTION-NOTES.md
nachweise/AI-ACT-STATEMENT.md
nachweise/CONTENT-ASSURANCE-EVIDENCE.pdf
nachweise/CONTENT-ASSURANCE-SUMMARY.md
nachweise/VULNERABILITY-AUDIT.md
nachweise/NPM-AUDIT-SUMMARY.json
nachweise/GRYPE-SBOM-SCAN.json
nachweise/GRYPE-SBOM-SCAN.md
nachweise/COMMUNITY-GOVERNANCE.md
nachweise/COMMUNITY-FEEDBACK-FORM.md
nachweise/COMMUNITY-CATALOG-MAPPING-FORM.md
nachweise/SECURITY-REPORT-FORM.md
nachweise/SBOM.cdx.json
nachweise/VEX.cdx.json
nachweise/SHA256SUMS.txt
nachweise/manifest.json

Verification
------------
1. In the package folder, compare every file against nachweise/SHA256SUMS.txt (shasum -a 256 -c nachweise/SHA256SUMS.txt).
2. A copy is signed only if SHA256SUMS.txt.minisig or SHA256SUMS.txt.asc is present. Verify it
   with minisign or gpg against the release public key obtained out-of-band from the provider.
3. Without a signature file the copy is unsigned; rely on SHA256SUMS.txt and the delivery channel.

Email/download package
----------------------
Versatile_AI_Risk_Assessment-DSGVO-Check-Community-vara-v3.27.1.zip
Versatile_AI_Risk_Assessment-DSGVO-Check-Community-vara-v3.27.1.zip.sha256
The ZIP and sidecar checksum are generated together as delivery companion files.

Legal/Product note
------------------
This package includes Community usage notes. They are product information, not legal advice.
