Trust center
Security and trust at WizBI
Our certifications, how we protect your organisation’s data, the documents that bind us, and how to reach our security team.
Certifications and verifications
ISO/IEC 27001:2022WIZBI.AI LTD is certified to ISO/IEC 27001:2022, the international standard for information security management.
Scope: development, implementation and support of data-driven software systems and AI agents. Certificate 070926059721, certification body ARS Assessment (UAF accredited).
Valid until
Google CloudThe service runs on Google Cloud infrastructure.
- Google for Startups Cloud Program
WizBI is a member of the Google for Startups Cloud Program.
- MCP Registry
WizBI is listed in the official MCP Registry as ai.wizbi/wizbi.
Hashavshevet · H-ConnectWizBI connects to Hashavshevet through H-Connect as a registered software house.
- Legal Center
Our binding legal documents are published at legal.wizbi.ai, each with a version number and an effective date.
- Responsible disclosure and security.txt
We publish a vulnerability disclosure policy and a security.txt file (RFC 9116).
How your data is protected
- Encryption
Traffic to the service and between its components is encrypted (HTTPS/TLS), and data is encrypted at rest in the cloud infrastructure.
- Secrets in a managed vault
Passwords and access keys to your sources are kept in a managed vault, never in code or in logs.
- Each organisation separate
Each organisation’s data and permissions are kept apart from every other organisation’s. An organisation’s questions run only on its own data.
- Permissions by organisation, group and user
The same person gets the same permissions on every channel, and an answer draws only on what that person may see.
- Verified sign-in
Sign-in with a Microsoft or Google account, or with a one-time code.
- Every access logged
Every question and every access to data is logged. The service and its connections are monitored, and anomalies are handled by our team.
- No training on your data
Your data is not used to train models. Our model providers are operated in settings that do not permit them to train on it.
- Staff access
WizBI staff access to systems and customer data is limited to operations and support, on a least-privilege basis.
- Separate environments
Development, testing and production are separate environments, and changes are tested before they reach production.
- Security incidents
Incidents are handled under a procedure; customers are notified as their agreement and the DPA provide.
- Your data stays yours
The data belongs to the organisation. You can ask for an export, and when the engagement ends the data is deleted as the agreement provides.
Processing locations and subprocessors are listed in Annex 3 of the Data Processing Agreement.
Legal documents
The binding documents are published, with a version number and an effective date, at the Legal Center.
Report a vulnerability
Found a security issue? Write to us at legal@wizbi.ai. How to report, and what we ask of you: vulnerability disclosure policy. Machine-readable: security.txt.
Security questions
A security questionnaire, a copy of the ISO certificate, or anything else? Write to us and we will get back to you.
This page is a general overview for information only and reflects the position on the date it was updated. It is not a contractual commitment and does not replace the agreement between the parties; the binding terms are those of the agreement and of the documents in the Legal Center.