-500px.png){kind=spacer}
Certifications & Registrations
Recognized standards, formally registered
ISO/IEC 27001:2022
Information Security Management System.
NATO NCAGE 1K0SL
NATO Commercial and Government Entity code, enabling identification as a supplier in NATO member countries’ procurement systems.
ORDA: RNPC Certificate
Registered in Romania’s National Register of Computer Programs (RNPC), administered by the Romanian Copyright Office (ORDA). Certificate series 478249BV, no. 13922, issued 30 September 2026, covering ZETTA AI Box, ZETTA Engines, ZETTA Monitoring and ZETTA Factory.
ISO 9001 guarantees consistent quality in how we work; ISO/IEC 42001 guarantees that our AI is built and managed responsibly.
Registration in the NATO Codification System identifies ZETTA as a supplier; it does not constitute NATO certification or approval.
Regulatory Compliance
How we address European AI and cyber regulation
We classify each AI function of ZETTA AI Box by intended use and risk level, and document the corresponding obligations, including transparency and human oversight.
We maintain a vulnerability disclosure policy, security-update commitments and a software component inventory (SBOM) for ZETTA AI Box. Vulnerability reporting obligations apply from 11 September 2026; full application from 11 December 2027.
ZETTA AI Box processes data locally under the customer’s control. Our privacy and data-protection documentation is available on request.
ZETTA AI Box hardware platforms carry the manufacturer’s CE declaration.
Under evaluation for product-level security certification.
Security by Design
Data sovereignty is built in, not certified
Offline operation and data sovereignty are product capabilities, not certifications. ZETTA AI Box processes data locally, has no cloud dependencies, supports full network isolation and leaves customers in control of their data.
Fingerprint on intake
Each incoming file receives a SHA-256 fingerprint on intake and is kept strictly read-only.
Re-verified at every stage
Files are re-verified following ingestion, prior to report generation, and at project closure.
Forensic images protected
Digital forensic images are verified against their original acquisition hashes and are never mounted or modified directly.
Immutable audit trail
Hash-chained logs maintain fully auditable, immutable tracking to confirm data integrity and verify every analytical action taken.
