Is Ada ISO 27001 certified?
UnverifiedAda · Customer support
Not verified. We could not confirm an ISO/IEC 27001 certification for Ada.
What we checked
This assessment separates the consumer product from any business plan. It uses the vendor documents linked below; an unverified item is not a pass.
- ISO/IEC 27001
- Not verified
- No public ISO/IEC 27001 certification was confirmed. Request evidence from Ada if this is a procurement requirement.
- SOC 2
- Confirmed
- Ada also reports a SOC 2 attestation, which can complement but does not replace ISO scope evidence.
- Default data training
- No by default
- Customer data is never used to train shared or public models; zero data retention with LLM providers, and any fine-tuning uses a single customer's own de-identified data. Ada is enterprise-only, so there is no consumer tier.
- Business-tier training
- No by default
- Enterprise (the only tier) with an executed DPA, HIPAA documentation obtained during procurement, and a negotiated EU data-residency clause is the business tier recorded for this profile.
Practical risk: Ada is enterprise-only and says it never trains shared models on your data, holds SOC 2 Type II, publishes subprocessors and offers HIPAA documentation and negotiated EU residency. The open questions are ISO 27001 (not listed on its trust center) and confirming a named BAA before regulated deployment.
How to make a decision
Check the precise account tier, written contract and intended data before approving Ada. A security certification, DPA or setting can apply to only part of a vendor's service. Keep the source links with your supplier review and revisit them when the vendor changes its terms.
More on Ada
See the full Ada risk profile, with every data-handling fact and its source, or browse all rated AI tools.