To calculate the AI trust score, Collibra evaluates the following factors for each supported asset type. Each factor contributes a weighted score, and the overall result is the weighted average of all active factors.
For information on configuring factor weights and score ranges, go to Edit the AI Trust Score settings. For information on interpreting and improving scores, go to Interpreting and improving the AI trust score of an asset.
Supported asset types
The AI Trust Score is calculated for the following asset types. The score calculation differs depending on the asset type.
| Asset type | Public ID | UUID | Trust score type |
|---|---|---|---|
| AI Use Case | AIUseCase | 00000000-0000-0000-0000-000000031401 | AI Use Case trust score |
| AI Agent | AIAgent | 00000000-0000-0000-0000-000000031450 | AI technical asset trust score |
| AI Agent Version | AIAgentVersion | 00000000-0000-0000-0000-000000031452 | AI technical asset trust score |
| AI Model Version | AIModel | 00000000-0000-0000-0000-000000031402 | AI technical asset trust score |
| AI Base Model | FoundationalAIModel | 00000000-0000-0000-0000-000000031422 | AI technical asset trust score |
Factor 1: Documentation
Applies to all supported asset types. This factor checks how well the asset is described and connected in the catalog, using three yes/no checks.
Check 1: Has an Owner assigned
The asset must have at least one user or group assigned with the Owner role.
| Check | Role (Public ID) | UUID | Role in Trust Score (theme) |
|---|---|---|---|
| Has an Owner assigned | Owner | 00000000-0000-0000-0000-000000005040 |
Documentation Applies to all supported asset types. The asset must have at least one user or group assigned with the Owner role. |
Check 2: Has a description
The asset must have a non-empty description attribute. For technical assets, a description imported from a source system also counts.
| Attribute type | Public ID | UUID | Notes |
|---|---|---|---|
| Description | Description | 00000000-0000-0000-0000-000000003114 | All asset types |
| Description from source system | DescriptionFromSourceSystem | 00000000-0000-0000-0001-000500000074 | Technical assets only |
Note Collibra looks for a Description or a Description from source system. If either or both are present, the criterion is considered met. Having both does not carry more weight than having only one. For AI Use Case assets, only the standard Description attribute is checked; Description from source system is not used.
Check 3: Is connected to related assets
The direction of this check differs by asset type.
| Asset type | What is checked | Public ID | UUID |
|---|---|---|---|
| AI Use Case | Is linked to at least one technical AI asset (AI Model Version, AI Agent, or AI Base Model) |
|
|
| AI Model Version | Is used by at least one AI Use Case (directly or via its parent Base Model) |
|
|
| AI Base Model | Is used by at least one AI Use Case (directly or via one of its Model Versions) |
|
|
| AI Agent | Is used by at least one AI Use Case | AIUseCaseUsesAIAgent (as target) | 00000000-0000-0000-0000-000000007109 |
| AI Agent Version | The parent Agent is used by at least one AI Use Case | AgentHasVersion ← AIUseCaseUsesAIAgent | 00000000-0000-0000-0000-000000007206 ← 00000000-0000-0000-0000-000000007109 |
Factor 2: Lifecycle progress
Applies to all supported asset types. This factor measures how far the asset has progressed through its lifecycle.
If Lifecycle management is disabled for an asset type, the weight for this factor is set to 0 and it is excluded from the score entirely. Assets that transition into the Retirement lifecycle phase have their trust score cleared and no longer receive a score.
Factor 3: Risk rating
Applies to AI Use Case assets only. This factor checks the Overall Risk Rating attribute set on the AI Use Case. It reflects whether the risk has been assessed and what the outcome was.
The value is the answer to the "What is the overall risk rating of this AI use case?" question in the out-of-the-box Risks and Safeguards assessment.
| Attribute type | Public ID | UUID |
|---|---|---|
| Overall Risk Rating | OverallRiskRating | 00000000-0000-0000-0000-000000000325 |
Factor 4: Data Assets
Applies to AI Use Case assets only. This factor checks whether the AI Use Case is linked to at least one data asset. Any single link of the types listed below is sufficient.
| Relation type | Public ID | UUID |
|---|---|---|
| AI Use Case infers from / used to infer Asset | AIUseCaseTransformsAsset | 00000000-0000-0000-0000-000000007099 |
| AI Use Case is trained by / trains Asset | AIUseCaseTrainedByAsset | 00000000-0000-0000-0000-000000007100 |
| AI Use Case has output / is output Asset | AIUseCaseHasOutputAsset | 00000000-0000-0000-0000-000000007101 |
Factor 5: Linked Technology Assets
Applies to AI Use Case assets only. This factor reflects the average trust score of the technical AI assets linked to the Use Case.
| Relation path | Public ID | UUID |
|---|---|---|
| AI Use Case → AI Model Version | AIUseCaseUsesAIModel | 00000000-0000-0000-0000-000000007098 |
| AI Use Case → AI Agent | AIUseCaseUsesAIAgent | 00000000-0000-0000-0000-000000007109 |
| AI Use Case → AI Base Model → AI Model Version | AIUseCaseUsesBaseModel → ModelHasVersion | 00000000-0000-0000-0000-000000077002 → 00000000-0000-0000-0000-000000077000 |
| AI Use Case → AI Agent → AI Agent Version | AIUseCaseUsesAIAgent → AgentHasVersion | 00000000-0000-0000-0000-000000007109 → 00000000-0000-0000-0000-000000007206 |
Factor 6: Data integrity
Applies to AI Agent, AI Agent Version, AI Base Model, and AI Model Version assets. This factor evaluates how well the data used by the AI asset is governed, using two independent signals: lineage and sensitivity.
Lineage checks whether the asset is linked to data assets (training data, inference data, or output data). Sensitivity checks whether any of those linked data assets are classified with a sensitive data category (PII or Personally Identifiable Information). The evaluation logic differs by asset type.
AI Model Version
Lineage: Checks the model version directly for any of the following relation types.
| Relation type | Public ID | UUID |
|---|---|---|
| AI Model Version trained by / trains Asset | AIModelTrainedByAsset | 00000000-0000-0000-0000-000000007102 |
| AI Model Version infers from / used to infer Asset | AIModelInfersFromAsset | 00000000-0000-0000-0000-000000007103 |
| AI Model Version has output / is output Asset | AIModelHasOutputAsset | 00000000-0000-0000-0000-000000007104 |
Sensitivity: Checks data categories reachable via the following derived relation type paths for PII classification.
| Derived relation type (Public ID) | Meaning |
|---|---|
| AIModelVersionInfersFromDataCategory | Data category of the inference data used by the model version |
| AIModelVersionIsTrainedByDataCategory | Data category of the training data used by the model version |
| AIModelVersionHasOutputDataCategory | Data category of the output data produced by the model version |
AI Base Model
Lineage: Checks the base model directly for the following relation type.
| Relation type | Public ID | UUID |
|---|---|---|
| AI Base Model trained by (AI Governance) / trains (AI Governance) Asset | FoundationalAIModelTrainedByAsset | 00000000-0000-0000-0000-000000007117 |
Sensitivity: Checks data categories reachable via the following derived relation type paths for PII classification.
| Derived relation type (Public ID) | Meaning |
|---|---|
| AIBaseModelInfersFromDataCategory | Data category of the inference data used by the base model |
| AIBaseModelIsTrainedByDataCategory | Data category of the training data used by the base model |
| AIBaseModelHasOutputDataCategory | Data category of the output data produced by the base model |
AI Agent
Lineage and sensitivity are not evaluated on the agent directly. Instead, Collibra delegates to the AI Model Versions linked to the agent via the following relation type and applies the same lineage and sensitivity checks as for AI Model Version.
| Relation type | Public ID | UUID |
|---|---|---|
| AI Agent uses / is used by AI Model Version | AIAgentUsesAIModel | 00000000-0000-0000-0000-000000007108 |
AI Agent Version
Lineage is evaluated using two independent sources: tool lineage and parent agent model lineage.
Tool lineage: Finds tools called by this Agent Version, then checks those tools for data links.
| Relation type | Public ID | UUID |
|---|---|---|
| AI Agent Version calls / is called by Tool | AgentVersionCallsTool | 00000000-0000-0000-0000-000000007207 |
| AI Agent Tool can read inference data / inference data is read by AI Agent Tool | AIAgentToolCanReadInferenceData | 00000000-0000-0000-0000-000000007211 |
| AI Agent Tool can manipulate output data / output data is manipulated by AI Agent Tool | AIAgentToolCanManipulateOutputData | 00000000-0000-0000-0000-000000007212 |
Parent agent model lineage: Walks up via AgentHasVersion (00000000-0000-0000-0000-000000007206) to the parent AI Agent, then to its AI Model Versions, then checks the same lineage relation types as AI Model Version.
Note Sensitivity is only evaluated from the parent AI Agent's model versions (same PII check as AI Model Version). Tools are not checked for sensitivity.