# Security at NiCE | Cognigy NiCE | Cognigy provides enterprise-grade AI automation and conversational platforms that enable organizations to deliver secure, compliant, and human-centric customer experiences. Headquartered in Düsseldorf, Germany, the company operates under a unified governance framework certified to international standards including ISO 27001, ISO 27701, ISO 42001, SOC 2 Type II, TISAX and BSI C5. NiCE | Cognigy’s platform combines advanced automation, AI orchestration, and natural language understanding (NLU) with a strong focus on data protection, reliability, and regulatory compliance. ### Resources [Bulk download](https://trust.cognigy.com/doc/trust-zip?r=h6mismzvjlq7ks8m99fd4) ### Certificates | | | --- | | #### PCI DSS 4.0 – Attestation of Compliance (AOC)
Official PCI DSS 4.0 Attestation of Compliance confirming Cognigy’s validated compliance status, issued by an independent QSA.
Request access PCI DSS 4.0 – Attestation of Compliance (AOC) | | #### ISO/IEC 27001:2022
NiCE | Cognigy’s ISO 27001:2022 certification demonstrates that our Information Security Management System (ISMS) protects data through systematically implemented controls for confidentiality, integrity, and availability across our cloud and corporate environments.
Request access ISO/IEC 27001:2022 | | #### ISO/IEC 27701:2019
NiCE | Cognigy’s ISO 27701:2019 certification extends our ISMS to a Privacy Information Management System (PIMS), ensuring compliance with global data protection principles and providing a structured framework for managing personal data in alignment with GDPR and related privacy laws.
Request access ISO/IEC 27701:2019 | | #### ISO/IEC 42001:2023
NiCE | Cognigy is ISO 42001:2023 certified, confirming our commitment to trustworthy and responsible AI management through a structured framework that governs the ethical, secure, and transparent use of AI across our products and operations.
Request access ISO/IEC 42001:2023 | | #### Cognigy ISO 9001-2015
Cognigy has been awarded the ISO 9001 certificate, validating its implementation of a robust quality management system that adheres to the globally recognized standards, ensuring consistent delivery of high-quality products and services, and driving customer satisfaction.
Request access Cognigy ISO 9001-2015 | | #### KIBV Guetesiegel Update 2021
Cognigy complies with the KI Gütesiegel from KI Bundesverband e.V., promoting human-centered and ethical AI use. This certification ensures our AI solutions are transparent, secure, unbiased, and responsibly developed, following best practices to continuously improve AI deployment.
View KIBV Guetesiegel Update 2021 | | #### TISAX AL2 (Assessment Level 2)
TISAX® Assessment Objectives Data Protection according to EU-GDPR Art. 28 ("Processor") High Availability Confidential
Request access TISAX AL2 (Assessment Level 2) | ### Policies | | | --- | | #### Incident Response Plan
Request access Incident Response Plan | | #### Whistleblower Protection Act
The Whistle Blowing Act protects individuals who report unethical, illegal, or harmful activities within an organization, ensuring their confidentiality and safeguarding them from retaliation.
View Whistleblower Protection Act | | #### Carbon Reduction Commitment
Cognigy is committed to reducing our carbon footprint and contributing to a sustainable future. We pledge to minimize greenhouse gas emissions by improving energy efficiency, using renewable energy sources wherever possible, reducing waste, and supporting eco-friendly practices across our operations.
View Carbon Reduction Commitment | | #### Supplier Code of Conduct
Our Supplier Code of Conduct ensures ethical, fair, and sustainable business practices.
View Supplier Code of Conduct | ### Reports | | | --- | | #### NiCE | Cognigy – SOC 2 Type II Report 2025
Independent attestation by A-LIGN verifying the operational effectiveness of NiCE | Cognigy’s security, availability, and confidentiality controls under the AICPA Trust Services Criteria.
Request access NiCE | Cognigy – SOC 2 Type II Report 2025 | | #### NiCE | Cognigy – HIPAA Type 2 Final Report 2025
Independent assessment confirming NiCE | Cognigy’s compliance with the HIPAA Security, Privacy, and Breach Notification Rules through tested administrative, physical, and technical safeguards protecting protected health information (PHI).
Request access NiCE | Cognigy – HIPAA Type 2 Final Report 2025 | | #### NiCE | Cognigy – C5 & AIC4 Attestation 2025
Independent assurance confirming Cognigy’s compliance with the BSI C5:2020 Cloud Criteria Catalogue and AIC4 assurance criteria for trustworthy AI systems. Catalogue (C5) attestation, demonstrating that our cloud environment meets the rigorous security and transparency requirements defined by the German Federal Office for Information Security (BSI) for secure cloud service operations.
Request access NiCE | Cognigy – C5 & AIC4 Attestation 2025 | | #### NiCE | Cognigy – ISO 42001 Certification Audit 2025
Independent certification audit confirming the design and operational effectiveness of NiCE | Cognigy’s Artificial Intelligence Management System (AIMS) in accordance with ISO/IEC 42001:2023 for responsible, ethical, and transparent AI governance.
Request access NiCE | Cognigy – ISO 42001 Certification Audit 2025 | | #### NiCE | Cognigy – ISO 27001 & 27701 Final Audit Report 2025
The final audit report confirming NiCE | Cognigy’s successful certification to ISO/IEC 27001:2022 and ISO/IEC 27701:2019, validating the effectiveness of our information security and privacy management systems.
Request access NiCE | Cognigy – ISO 27001 & 27701 Final Audit Report 2025 | | #### NiCE | Cognigy - Statement of Applicability 2025
Request access NiCE | Cognigy - Statement of Applicability 2025 | | #### NiCE | Cognigy – ISO 27001:2022 to 27002:2022 Control Mapping
This document maps Cognigy’s implemented ISO/IEC 27001:2022 controls to the corresponding guidance in ISO/IEC 27002:2022, providing transparency into how Cognigy’s Information Security Management System (ISMS) aligns with the latest international best practices for information security control implementation
Request access NiCE | Cognigy – ISO 27001:2022 to 27002:2022 Control Mapping | | #### Voluntary Product Accessibility (VPAT) 2026
At Cognigy, we are committed to providing accessible products and services to all users. As part of this commitment, we regularly conduct a Voluntary Product Accessibility Template (VPAT) assessment to ensure our solutions meet the highest accessibility standards, including compliance with Section 508 and WCAG (Web Content Accessibility Guidelines). Our latest VPAT assessment reflects our ongoing efforts to create inclusive experiences and highlights the steps we are taking to improve accessibility across our platform. We believe that accessible technology empowers everyone, and we strive to deliver products that are usable by all individuals, regardless of ability.
Request access Voluntary Product Accessibility (VPAT) 2026 | | #### AIC4
Request access AIC4 | ### Questionnaires | | | --- | | #### CAIQv4.0.3 STAR-Security-Questionnaire
The Consensus Assessments Initiative Questionnaire (CAIQ) v4.0.3 is a comprehensive security self-assessment framework provided by the Cloud Security Alliance (CSA). It is designed to align with the CSA Cloud Controls Matrix (CCM) and supports organizations in evaluating their cloud service offerings against industry-standard security practices.
[Download CAIQv4.0.3 STAR-Security-Questionnaire](https://trust.cognigy.com/doc/trust?rid=675082dd52683fc98463df2f&r=h6mismzvjlq7ks8m99fd4) |