Trust & security

AI with human oversight. All data in the EU.

How ComplAi governs its use of AI, protects your information and where your data is hosted.

  • Signing off a requirement: an authorised representative confirms the answers are complete and accurate.

The foundation: certified, compliant and hosted in the EU.

  • UKAS/DAkkS AI alignment
  • ISO 27001 certified
  • GDPR compliant
  • All data hosted in the EU

AI governance: the AI reads, people decide.

AI use is aligned with UKAS and DAkkS guidance (Technical Bulletin, 2025): human oversight, citations, audit trail, human final decision.

ComplAi assists assessors; every decision and signature stays with them.

Every answer is grounded in the submitted documents and cited to the source passage, results are reproducible, and a human reviews every output — in line with UKAS and DAkkS guidance.

  1. Documents uploaded
  2. AI reads, checks and cites (ComplAi)
  3. The assessor reviews, edits and signs
  4. Every step in the audit trail
The AI’s part — every decision stays with people

Information security, certified to ISO 27001.

  • Secure data rooms with access control and a complete audit trail
  • Multi-tenant data separation
  • Encrypted in transit and at rest
  • Auth0 B2B authentication
  • Versioned file store
  • Full audit trail per asset

Your data protected, hosted in the EU, judged by your people.

  1. Data protection

    ComplAi is GDPR compliant.

  2. Hosting

    All data is hosted in the EU. ComplAi runs on Microsoft Azure.

  3. Independence

    ComplAi was spun out of the independent third-party assurance company DNV and was built by people with deep knowledge and experience of compliance and digitalisation across many industries. We are a neutral technology partner: we hold no opinion on the file. The assessment record, the decision and the judgement stay with your assessors — the platform supplies the evidence, the traceability and the time.

Trust Center

Certificates, policies and the list of sub-processors, kept current in our public Trust Center.

The ComplAi Trust Center: overview, ISO 27001 and GDPR, controls

Questions from your security or IT review?