Standards
ISO/IEC 27001:2022
The international standard for information security management — the security backbone that keeps your data private while AI works on it.
Information security management
What it is
ISO/IEC 27001 specifies the requirements for an information security management system (ISMS): a systematic approach to managing the confidentiality, integrity and availability of information through risk assessment, controls and continual improvement.
Why it matters for private AI
Private AI is only as trustworthy as the security around the data it uses. The whole premise of our solution — that your data never leaves your control — depends on rigorous information security at every layer, from connectors and indexes to access controls and audit logs.
ISO/IEC 27001 is the recognised benchmark for that rigour. Building to it means security is a managed system with owners, controls and evidence, not a set of ad-hoc precautions.
How AgoActum applies it
- Encryption in transit and at rest, SSO/SAML, and granular role-based access control that honours your existing permissions.
- Comprehensive, tamper-evident audit logging across every query and action.
- Deployment inside your own tenancy or on-premise, so data residency and control stay with you.
Compliance. AgoActum’s private AI solution is designed and operated to comply with ISO/IEC 27001:2022. It is one of five ISO/IEC standards that together govern how we manage AI risk, ensure ethical use and support legal compliance.
See our standards & complianceGovernance you can evidence
See how our private AI solution puts these standards to work on your own data — securely, and with your team in control.