Labels
Gold, Silver, Bronze
The tier shows who runs the AI that sees personal data. The index shows how well it is implemented within the tier.
Gold · Local AI
The AI runs at the customer's site. Real content never leaves the customer.
All AI functions run on the customer's devices or servers. Neither the vendor nor any third party receives content – except reports the user triggers and that contain only invented data (C-08). The AI functions work without an internet connection.
Silver · Hybrid AI
Personal data is seen only by AI run by the customer or by the vendor itself.
AI that processes personal data runs at the customer's site or on infrastructure the vendor operates itself. A third-party AI receives, at most, requests without personal data. Silver has two variants; a product may meet both.
- S-a · Vendor-operated AI: Software as a service (SaaS) whose models the vendor runs itself.
- S-b · Local AI with a router: A router sends only requests without personal data to a third-party AI; all others stay local or with the vendor.
Bronze · Pseudonymised
A third-party AI receives personal data only in pseudonymised form.
A third-party AI is used. Before every transfer, a pseudonymisation step replaces personal data with placeholders. The mapping table never leaves the customer or the vendor.
Criteria: C-01 to C-08 and B-01, B-02, B-03, B-04, B-05, B-06, B-07, B-08
The NOCIP index
Five groups of 0 to 2 points each. The index never changes the tier: a Bronze product with 9 points stays Bronze. It shows who does more within a tier, and it appears on the badge next to the tier, e.g. “Silver · 8/10”.
| Group | 1 point | 2 points |
|---|---|---|
| I-1Transparency | A data-flow diagram is published that shows the processing location of every AI function. | In addition, the product shows for each AI function or request where it is processed. |
| I-2Customer control | The customer can switch off every external AI connection; the product then continues with reduced functions. (Gold: met.) | In addition, all AI functions are available in a variant that runs entirely at the customer's site. (Gold: met.) |
| I-3Data minimisation | AI input and output are kept outside the customer for at most 30 days. (Gold: met.) | In addition, nothing is kept outside the customer beyond processing, and local logs contain content only if the customer switches this on. |
| I-4Integrity | The product verifies the signature or checksum of every model before loading it. | In addition, local stores holding content or mapping tables are encrypted (or set-up with operating-system encryption is documented). |
| I-5Verifiability | The customer can view a log of all external AI requests (Gold: of all outgoing connections). | In addition, the vendor gives NOCIP permanent test access or a test installation for unannounced spot checks. |
Rules for the label
- Tier
- A product receives the highest tier whose criteria it fully meets; the common criteria (C) always apply. Silver is met when all criteria of the applicable variant(s) are met.
- Validity
- A label is valid for 12 months for the audited product version and later versions without changes to the AI architecture. Renewal requires a new audit.
- Register
- Every label receives an ID (e.g. NOCIP-G-2026-0001) and a public entry on nocip.com with product, version, tier, index, catalogue version and validity. The label's seal carries the ID as a number in its ring (e.g. “GEPRÜFT · NR. G-2026-0001”).
- Suspension and withdrawal
- If a change leads to a lower tier, the label is suspended until it is re-audited. False statements or misuse lead to withdrawal; the withdrawal stays visible in the register.
- Fees
- The audit and the label are free of charge. One retest after a failed criterion is free of charge.
- Auditor
- Audits are carried out by be next GmbH. be next itself offers pseudonymisation software (LexITanon); it audits its own products against the same checklist and publishes the full audit report.