Trust Centre

IngeData has initiated the implementation of an Artificial Intelligence Management System (AIMS) aligned with ISO/IEC 42001. This initiative aims to establish a structured framework for responsible AI governance, including risk management, transparency, accountability, and continuous improvement. The implementation process is currently underway, with a certification audit planned as part of the company's roadmap towards ISO/IEC 42001 certification.

IngeData operates as a data processor, processing personal data on behalf of its clients and in accordance with their documented instructions. The company is committed to complying with the applicable obligations of the GDPR, particularly those relating to data confidentiality, security, data processing agreements, and the implementation of appropriate technical and organizational measures to protect personal data.

IngeData is committed to maintaining appropriate cybersecurity measures and operational safeguards in alignment with the NIS2 Directive. As a service provider and subcontractor, IngeData supports its clients' compliance obligations by implementing relevant technical and organizational security measures, in accordance with contractual requirements and applicable regulatory obligations.

IngeData is committed to supporting compliance with the EU AI Act within the scope of its activities as a service provider and subcontractor. The company operates in accordance with its contractual responsibilities and applicable regulatory requirements, supporting its clients in maintaining appropriate data governance, traceability, transparency, and quality controls throughout AI data-related operations.

When providing services involving Protected Health Information (PHI) on behalf of HIPAA-regulated entities, IngeData undertakes to comply with the applicable HIPAA requirements within its role as a service provider, as defined by the relevant contractual arrangements. Appropriate safeguards are implemented to support the confidentiality, integrity, and security of healthcare information.

IngeData is currently implementing a Privacy Information Management System (PIMS) aligned with ISO/IEC 27701. A comprehensive mapping exercise has been completed against the relevant ISO/IEC 27001 security controls to identify applicable privacy requirements, assess existing measures, and define the necessary actions. IngeData is progressively implementing the identified measures as part of its ongoing compliance program.

IngeData is actively working towards alignment with ISO/IEC 27032 cybersecurity guidelines. The company is progressively strengthening its cybersecurity practices through the implementation of relevant security measures and controls based on ISO/IEC 27001 and ISO/IEC 27002. An ongoing alignment process is underway to assess, implement, and continuously improve the measures required to meet the applicable ISO/IEC 27032 guidelines.