Trust and security | Cogniveil

Trust

If you are here, you are probably running a vendor security review, a due diligence exercise, or a regulatory assessment. This section is written for that job. It gives you the architecture, the residency options, and the certifications, and it gives you the documentation to take back to your team.

Built to be reviewed

We do not train on your data. Governance is not something we added to the product. It is the product.

Three pages, one review

Security architecture.How the platform is isolated, how identity is federated with your own systems, how traffic reaches model inference privately, and how we test our own defenses.Security architecture Data residency.What is stored where, region by region, and how the answer changes when you deploy on premises or inside your own tenant.Data residency Compliance.The four ISO certificates with their scope, and our posture per regulation: DORA, the EU AI Act, GDPR, and NIS2, each stated in its own precise terms.Compliance

Certified

ISO 9001. ISO 27001. ISO 27701. ISO 22301.

Quality, information security, privacy, and business continuity: the four areas a security review asks about most, each independently certified. Certificate details, scope statements, and issuing bodies are on the compliance page.

ISO 9001 ISO 27001 ISO 27701 ISO 22301

Get the security pack

The pack contains the four certificates with their full scope statements, the architecture diagrams, the Statement of Applicability, and the data processing agreement. It is written for the reviewer, not for marketing.

Work email. Company.

Get the security pack

Prefer a conversation with our security team instead? Book a demo

Evidence for your review

Get the security pack

For security reviewers and vendor risk teams. The pack contains the four ISO certificates with their full scope statements, the architecture diagrams, and the data processing agreement. The Statement of Applicability is included in the pack; it is not published on the site.