Security & Trust
How the Kognitos platform that powers ICVIQ protects data — and where the live compliance evidence lives.
Kognitos Trust Center
Kognitos maintains a public Trust Center where compliance certificates, security documentation and subprocessor information are published and kept current. Requestable documents such as the SOC 2 report are gated behind a short NDA form on the same page.
trust.kognitos.com/Certifications & compliance
ISO 42001:2023
International standard for an AI management system, covering responsible development, governance and risk management of AI.
ISO 27001:2022
International standard for an audited information-security management system covering people, processes and technology.
Cyber Essentials Plus
UK government-backed certification with independent technical testing of essential cyber-security controls.
SOC 2 Type II
Independent audit of security, availability and confidentiality controls, verified over an extended observation period.
HIPAA
Controls aligned to the safe handling of protected health information for healthcare deployments.
GDPR
Privacy practices for personal data collected and processed under the EU General Data Protection Regulation.
Always verify the current status and download official reports from the Trust Center above.
How your data is protected
Built on AWS infrastructure
The platform runs on Amazon Bedrock, Textract, Lambda and EKS, with deployment across 30+ AWS regions and an optional deployment inside your own VPC for data sovereignty.
Official referenceGovernance, RBAC and audit trails
Trust center, governance and role-based access control apply across every step, with a full execution log and a plain-English audit trail for every run.
Official referenceDeterministic, hallucination-free execution
The patented neurosymbolic engine executes written instructions exactly as written, so every decision stays consistent, auditable and reproducible.
Official referenceCredentials stay on the server
In this workspace, Kognitos credentials are kept in server-side secrets and never reach the browser; checks run server-to-server.
In this app