AI Model Cards
Not Publicly Available
What is covered:
Do they have AI?
Do they train on my data?
Risk of Prompt Injection
Adherence to OWASP Top 10
Adherence to NIST AI RMF
26 risk vectors and more...
Carta
Feature Details
AI-powered Cap Table Builder
Uses AI to extract data from uploaded legal and financing documents and automatically fill cap table fields while guiding investors through setup or edits.
...
See more in full report.
Pricing Details
Freemium
Offers free tiers.
Per License
Charges per user, org, or access point.
Consumption-Based
Pay per token, API call, inference, etc.
Outcome-Based
Pay only when certain results or performance goals are achieved
Why are you here?

We're here to help!
AI Risk Intelligence
Why is AI risk important?
13%
of enterprises have suffered an AI-related security breach in the last year. These include AI-generated phishing and malicious prompt injection.
$4.4M
average cost per incident - with indirect prompt injection and data leakage via LLMs now among the top attack vectors across industries.
Assessing and Monitoring AI Risk becomes crucial
threats are real, fast-evolving, and uniquely difficult to detect. Staying proactive ensures you catch vulnerabilities before they become costly breaches both fiscally and reputationally.

#1
Carta, founded in 2012 by Henry Ward and Manu Kumar, started as eShares with the goal of digitizing paper stock certificates and evolved into a comprehensive equity management platform serving over 18,000 companies worldwide.

#2
The company is headquartered in Palo Alto, California, employs around 2,000 people, and generated approximately $330 million in revenue, positioning itself as a key player in simplifying cap table management, valuations, and equity plans.

#3
In 2021, Carta launched CartaX, a private market stock trading platform that facilitated about $10 billion in liquidity transactions by mid-2023, though the company later decided to exit the secondary trading business to prioritize trust and avoid conflicts of interest.
Impact
Adherence to OWASP Top 10
Do they train on my data?
Risk of Prompt Injection
Adherence to NIST
Do they have Web Search?
And more...
FAQ
What are the new AI security risks?
What industries do you specialize in?
How do I see how a vendor maps to the OWASP for LLM top 10
Contact us









