Skip to content

For buyers

Where does your software's AI run?

With a NOCIP label you see it at a glance. Without one, ten questions to your vendor help.

Check a label

A genuine badge links to its entry in the register. Check there that the label is valid and that the product and version match your software.

Ten questions for your software vendor

  1. Which functions use AI?Including functions such as text recognition, translation or writing suggestions.
  2. Where does each model run?On your computer or server, at the vendor, or at a third-party AI service?
  3. Which data goes to an AI service, and in which country is it processed?Ask for the connections and the region.
  4. Is personal data replaced first?And where is the table that turns the placeholders back into real values?
  5. Are inputs kept, and for how long?At the vendor and at the AI service.
  6. Is our data used for training?Is that excluded by contract?
  7. Does the software work without internet?If so: all AI functions or only some?
  8. Can we switch off external AI connections?And what still works afterwards?
  9. Can we see what was sent?A preview or a log of the requests.
  10. Who are the sub-processors?And is there a data processing agreement under GDPR Article 28?

What the tiers mean for you

NOCIP GoldGoldLocal AIThe AI runs at the customer's site. Real content never leaves the customer.NOCIP SilverSilverHybrid AIPersonal data is seen only by AI run by the customer or by the vendor itself.NOCIP BronzeBronzePseudonymisedA third-party AI receives personal data only in pseudonymised form.