Alongside the executive order, a group of technology chief executives signed a voluntary accord on Super Intelligence at the White House. It commits signatories to robust internal controls and multiple layers of audits and reviews. The President described it as "morally binding" rather than legally enforceable.
For anyone who works in GMP, the commitments will read oddly — not because they are wrong, but because they describe controls that regulated manufacturing has treated as table stakes for about thirty years.
What the accord commits to
The published commitments centre on internal controls and layered audit and review of how these systems are developed and deployed. It is a principles statement setting expectations, not a rulebook with obligations and penalties.
Two honest observations. It is voluntary, so there is no enforcement mechanism and no consequence for a signatory that quietly does less. And it binds the developers of these systems, not the companies deploying them — so it changes nothing about what you must do when you put a model into a GMP process.
It is still worth reading, for a reason that has nothing to do with compliance: it tells you what the largest model providers are willing to say in public about their own controls, which is useful when you are assessing one as a supplier.
GMP got there first
Strip the accord down and the principles are ones a quality professional could have written: keep documented internal controls, have independent review, audit what you build, keep records of it.
Regulated manufacturing has required exactly that of computerised systems since long before machine learning was a commercial proposition. Independent QA review, segregation of duties, tamper-evident audit trails, periodic review, change control, and a named person accountable for a decision — see GxP roles and responsibilities.
There is a reasonable point of pride here for people who work in this industry. The governance model the technology sector is now committing to voluntarily is a weaker version of what GMP has enforced for decades — and where the two meet, in the draft Annex 22, the regulated version is far more specific about what human oversight actually requires.
How to use it in a supplier assessment
If a vendor cites the accord in a sales conversation, treat the citation as a starting point rather than evidence, and ask what it means for you specifically:
- "You signed the accord. Which internal controls does that translate into for the product I would buy?"
- "Who performs the audits and reviews, and can I see a report?"
- "Does it change my contract in any way?" — almost certainly not, since the accord is voluntary and the contract is what binds anyone.
- "How does it affect the things I actually need: version pinning, change notification, data handling?" See qualifying an AI vendor.
A signature on a voluntary accord is not a qualification record, and it does not satisfy your supplier assessment. What satisfies it is evidence — see supplier qualification.
Broader picture in what the rename changes for GxP and GxP AI.
Where to go next
Explore GxP Copilot for AI-native validation, TraceDraft for source-traceable clinical documentation, or book a demo to see either on your own data.