# NOCIP

> NOCIP ("No Cloud Inference on Personal data") is a label for software and SaaS products that shows where the product's AI runs and where personal data goes. Three tiers, technically audited, free of charge, with a public register. Run by be next GmbH, Stuttgart, Germany. Website in German and English.

- Gold (Local AI): The AI runs at the customer's site. Real content never leaves the customer.
- Silver (Hybrid AI): Personal data is seen only by AI run by the customer or by the vendor itself.
- Bronze (Pseudonymised): A third-party AI receives personal data only in pseudonymised form.

Within each tier, the NOCIP index (0 to 10) rates transparency, customer control, data minimisation, integrity and verifiability.

Vendors can get certified in two ways: **Automated via MCP server** (recommended: an AI agent goes through the audit via the MCP server, a build system via the REST API; NOCIP tests the release in its own lab, every step is in a signed case log, a person signs the award) or **With documents**. Same criteria, same report, no fee. Applications are open; criteria catalogue 1.0 (released 2026-11-11). The lab currently tests Linux programs; Windows, macOS and cloud services go the way With documents for now.

## Automated via MCP server (for vendors and their AI agents)

- [Automated via MCP server: overview](https://nocip.com/en/automated-audit/): how an AI agent takes a product through the audit
- [Automated via MCP server: the process in detail](https://nocip.com/en/automated-audit-process/): every step, what the agent, the NOCIP systems and a person at NOCIP do
- [Handbook: automated via MCP server (PDF)](https://nocip.com/assets/docs/en/NOCIP_Automated_Audit_Handbook_v1.0.pdf)
- [MCP server](https://nocip.com/mcp/): Streamable HTTP, JSON responses; header "Authorization: Bearer <case token>"; tools: get_status, prove_domain, submit_self_assessment, add_evidence, set_test_target, request_test, list_findings, answer_finding, get_case_log, get_report_draft, get_seal, notify_release, get_criteria, withdraw
- [REST API](https://nocip.com/api/v1/) and [OpenAPI description](https://nocip.com/assets/api/nocip-api-v1.yaml)
- [Self-assessment schema](https://nocip.com/assets/api/self-assessment.schema.json), [connection manifest schema](https://nocip.com/assets/api/connections.schema.json), [test target schema](https://nocip.com/assets/api/target.schema.json)
- [Public key of the case log](https://nocip.com/assets/api/nocip-case-signing.pub) (Ed25519)
- [Full text for language models](https://nocip.com/llms-full.txt)

## Labels and criteria

- [The three tiers](https://nocip.com/en/labels/)
- [Criteria catalogue](https://nocip.com/en/criteria/)
- [Register of awarded labels](https://nocip.com/en/register/)
- [Certification](https://nocip.com/en/certification/) and [documents](https://nocip.com/en/documents/)

## Optional

- [Why local AI](https://nocip.com/en/why-local-ai/)
- [Contact](https://nocip.com/en/contact/) (applications: topic "Application for an audit")
- German version: https://nocip.com/ (Automatisiert über MCP-Server: https://nocip.com/automatisierte-pruefung/)