How is this different from hiring a freelancer to "test our prompts"?
Prompt testing checks whether outputs look good. An audit measures whether outputs are good — against a defined benchmark, with failures classified by root cause and fixes ranked by impact. You also keep the benchmark: the asset that makes every future release measurable.
Which models and stacks do you work with?
Model- and framework-agnostic: OpenAI, Anthropic, Google, open-weight models, and any RAG or agent stack — as long as we can run inputs through it, via API, a staging app, or batch file exchange.
We don't have test data. Can you still audit us?
Yes. We construct the benchmark from your use-case scenarios, product documentation, and any available support tickets or logs. Real inputs improve precision — and we'll tell you honestly where synthetic data limits confidence.
Is our data used to train anything?
No. Your inputs, outputs, and materials are never used to train models and never shared with third parties. Everything is treated as confidential, used only for the audit, and deleted from our working systems within 30 days of delivery. NDAs welcome.
What if the scores are bad?
Then the audit did its job — you found out before your users did, with the failure breakdown and fix order in hand. Most first audits surface two or three fixable root causes behind the majority of failures.
Why not buy an eval tool and run this ourselves?
Tools execute measurement — they don't decide what to measure. The hard part of evaluation is the benchmark: which cases, what "good" means for each one, and a failure taxonomy your team trusts. That's what the audit builds, and it hands the asset over in open formats (CSV/JSON benchmark, documented rubric) so your team can re-run it in any tool afterward. If you already have a trusted benchmark and criteria, you don't need us.
Who actually does the work?
The audit is led personally by Ernesto Rodriguez: intake, benchmark approval, calibration, and the readout are his. Scoring runs execute on an automated harness under his direction; he hand-labels the calibration set, reads every failing case, and signs the report. Scoring is never subcontracted.
Can you sign a BAA? How is regulated data handled?
We work on de-identified data: inputs should be de-identified before transfer, and we offer de-identification assistance at intake if your team needs help. On that model we don't sign BAAs and we make no HIPAA or SOC 2 attestation — if your compliance requires a BAA over raw data, we'll tell you on the intake call that we're not a fit, before you've paid anything. Working files are deleted within 30 days of delivery, with a file inventory available on request.