Certifications and agreements
- ISO 27001
- Certified. ISO 27001 is the international standard for running an information security management system.
- SOC 2
- Our SOC 2 report is available under NDA. Ask your contact for a copy.
- GDPR
- We sign data processing agreements (DPAs) on request.
- HIPAA
- We sign business associate agreements (BAAs) on request.
- NDA
- Signed at the start of every project, before any data changes hands.
If your security team has its own questionnaire, send it over. Your named contact will get it answered.
Five rules every project runs on
Certificates describe a system. These rules describe what happens to your data on your project.
- NDA first. Every engagement starts with a signed NDA, before any data changes hands.
- Agreed scope only. We use your data only for what we agreed. Nothing gets resold or reused on another project.
- Limited access. Only the people working on your project can get to its data.
- Yours to take back. When the engagement ends, we delete your data or send it back, whichever you prefer.
- A person to ask. Security questions go to your named contact, not a support queue.
Our own tools
Collection, transcription, translation and annotation happen in eight tools we built ourselves, so your data doesn't pass through a chain of rented software on its way to you. That gives us one place to control who can see what.
Datasets and consent
For our off-the-shelf speech datasets, every speaker consented to their recordings being used for commercial AI training. What you may do with a dataset is set out in its licence, which we agree with you for each deal.
What to ask before you sign
Whoever you work with, these are worth asking any data vendor. Here's what to ask us:
- A copy of the SOC 2 report, under NDA.
- A GDPR data processing agreement, if your data includes personal data from people in the EU or UK.
- A HIPAA business associate agreement, if your data includes protected health information.
- Who exactly will be able to see your data, and where they work.
- Written confirmation once your data has been deleted or returned.
Our guide to choosing a data annotation vendor has more questions like these.
Reporting a security issue
If you think you've found a security problem with our website or our services, email contact@indecalai.com. The same address is listed in our security.txt file.