Safeguarding Your Data Is Our Top Priority

Certified Information Security Management System (ISMS), externally audited annually by an accredited certification body. Covers the full Cognincian platform and supporting operations.

Full compliance with the EU General Data Protection Regulation. The Cognician platform supports data subject rights including, access, erasure, and portability.

Cognician supports international data transfers from the EU to the US under the EU-US Data Privacy Framework, established in 2023 as the successor to Privacy Shield following the Schrems II ruling. This ensures lawful transfer of personal data in accordance with EU adequacy requirements.

Where the DPF does not apply, Cognician relies on the European Commission's Standard Contractual Clauses as a lawful mechanism for transferring data outside the EEA.

Our security programme is risk-based and aligned with both ISO and NIST frameworks, covering Identify, Protect, Detect, Respond, and Recover functions with continuous monitoring and improvement cycles.

Cognician has proactively aligned its AI governance framework with the principles of the EU AI Act, not simply because it may apply to us, but because we believe it represents the right foundation for responsible AI. The Act's risk-based methodology reinforces the same values that underpin our broader approach to security and privacy: that trust must be earned through deliberate practice, not compliance minimums.

This alignment reflects who we are and how we work. Cognician operates at the intersection of human behavior and technology; our clients trust us with their people and their data. Embedding the EU AI Act's principles into our governance gives our clients, and their own stakeholders, confidence that the AI practices running through our platform are held to a rigorous, globally recognized standard today and as regulation continues to evolve.

Cognician does not hold a standalone SOC 2 report. Our platform is hosted entirely on Microsoft Azure, which maintains SOC 2 Type II certification across its infrastructure. Cognician's security controls are designed to operate within and complement Azure's environment. Microsoft's compliance document is available via the Azure Trust Center.

Internal audit function validates continuous control effectiveness and drives improvement between external cycles.

Aligned to industry standards. All findings formally tracked, prioritized, and remediated through structured governance.

Continuous scanning and real-time alerting ensure emerging threats are identified and addressed between scheduled assessments.