Security, Compliance & Trust
At indigo.ai, security, privacy, and regulatory compliance are foundational to everything we do.
This section of the guide brings together all the resources and tools available to help you understand how we protect your data, comply with the latest regulations, and support your obligations as a client or partner deploying AI solutions.
In this section, you'll find:
Our Trust Center, where you can access detailed information on our security policies, certifications, and data protection practices.
Guidance on AI Act compliance: what indigo.ai is doing to meet the regulation and what you need to do when using our platform.
Q1 2025 security features overview: key tools available to help you manage risk, ensure compliance, and protect your data.
1. Trust Center: Your Hub for Security, Privacy, and Compliance Information
The indigo.ai Trust Center is designed to give you full transparency into how we manage security, data protection, and compliance across our platform. Whether you need documentation for internal audits, clarity on our data practices, or confirmation of regulatory compliance, the Trust Center is your one-stop source.
Here’s what you can use it for:
📄 Access Our Security & Privacy Policies: Understand how we protect your data, including encryption, access control, infrastructure security, and data retention.
✅ Check Our Compliance Certifications: Get detailed information about our compliance with key standards and regulations such as ISO 27001, GDPR, and the upcoming AI Act.
🚨 Review Our Incident and Risk Management Approach: Learn how we handle incidents, ensure platform reliability, and mitigate risks.
📚 Download Helpful Resources: Quickly access FAQs and downloadable documents for vendor reviews, legal teams, or security assessments.
By centralizing all this information in one place, the Trust Center makes it easier for you to find the answers you need and helps demonstrate our ongoing commitment to security, transparency, and regulatory alignment.
🔗 Visit the Trust Center here: https://trust.indigo.ai/.
2. AI Act Compliance: What You Need to Know
The AI Act, adopted in 2024, introduces a regulatory framework for the development and use of AI systems within the European Union.
While indigo.ai is not classified as a provider of high-risk AI, our platform and features are designed to meet and exceed the AI Act’s core principles of transparency, human oversight, and data protection.
Our Approach
Transparency: We ensure that users are always informed when they are interacting with an AI system, as required under Article 50 of the AI Act.
No Manipulation: We do not—and do not allow—any use of AI for deceptive, manipulative, or exploitative purposes, as prohibited under Article 5 of the AI Act. One example of this commitment is our state-of-the-art Anti-Jailbreak Detection Tool, which is designed to prevent users from attempting to bypass safety measures or manipulate AI responses.
Human Oversight: Our platform is designed to allow easy human intervention and control over AI-driven processes.
Data Protection: Tools like audit logs, secrets management, and access controls help you comply with GDPR and internal policies.
Your Responsibilities as a Deployer
As a deployer of AI systems, you have specific responsibilities under the AI Act. Here's how to stay compliant:
1. Disclose AI Use to End Users
Under Article 50, you must clearly inform users that they are interacting with an AI system. This is particularly important in cases where the interaction might not be obviously AI-driven:
Add a welcome message such as: “Hi! I’m your virtual assistant powered by AI.”
In voice channels, this must be stated at the beginning of a call—not just on the website or interface.
2. Avoid Prohibited Use Cases
Do not use indigo.ai to implement AI agents that:
Exploit vulnerabilities of users due to age, disability, or economic status.
Deceive or manipulate users' decisions.
Perform real-time biometric identification, profiling, or risk prediction based on personality traits. These practices are explicitly banned under Article 5 of the AI Act.
3. Ensure AI Literacy and Oversight
Article 4 and Article 26 assign responsibilities to deployers:
Ensure your team members using indigo.ai are appropriately trained and understand how AI systems function.
Apply human oversight in workflows where sensitive decisions or data processing are involved.
3. Security Features
We're continuously investing in platform security to ensure that your AI systems remain resilient, compliant, and trustworthy.
In the deep dive articles below, you’ll find detailed insights into the key security-focused features released in Q1 2025, each designed to help you safeguard sensitive information, manage access more effectively and maintain full control over your data and operations.
Anti-Jailbreak Detection Tool: Prevents unauthorized modifications to AI agents, maintaining system integrity and safeguarding against potential exploits.
Audit Logs: Provides full transparency into platform activities, allowing businesses to monitor user access, track changes, and ensure compliance.
Secrets Management: Securely stores sensitive information like API tokens and authentication keys, ensuring they are accessible only to authorized users and systems.
Single Sign-On (SSO) & Multi-Factor Authentication (MFA): Simplifies and secures access to the platform, allowing users to log in once and securely authenticate with multiple layers of protection.
Each of these features plays a crucial role in fortifying the platform, giving businesses the tools they need to operate confidently in a secure environment.
Last updated
Was this helpful?