by Cognite
Cognite Data Fusion is an industrial DataOps and AI platform that contextualises data from sensors, equipment and enterprise systems into a unified, real-time industrial data model. It applies AI and machine learning so that industrial operators can extract actionable insights, optimise operations and support decision-making. Marketed for oil and gas, power and utilities, manufacturing and renewables. Vendor: Cognite AS (https://www.cognite.com/en).
Complete information about the vendor/provider of this AI application
Visual representation of the vendor's digital supply chain relationships
Third-party vendors and subprocessors used by this vendor
Processing and storage of data stored in Cognite Data Fusion. Location: USA & EU. Cloud, delivered through third-party cloud. Cognite discloses this supplier only as 'AWS' and names no legal entity.
Processing and storage of data stored in Cognite Data Fusion. Location: USA, EU & Japan. Cloud, delivered through third-party cloud. Disclosed legal entity: Google LLC (USA), not an EU entity.
Processing and storage of data stored in Cognite Data Fusion. Location: USA, EU & Japan. Cloud, delivered through third-party cloud. Disclosed legal entity: Microsoft Corporation (USA), not Microsoft Ireland Operations Ltd.
Processing and storage of data stored in Cognite Data Fusion. Location: USA, EU & Japan. Cloud, delivered through third-party cloud. Disclosed legal entity: Elastic International BV.
Used for messaging internally at Cognite. Information about alarms triggered by the system, incidents and support cases may be relayed through Slack. Location listed by Cognite as USA. Cloud, delivered through third-party cloud. Disclosed legal entity: Slack Technologies Ltd., which is an Irish-registered entity, so the entity and the stated country appear inconsistent in the source.
Tracking of issues, which may include customer information such as requester and details about the issue. Location: Germany. Cloud, delivered through third-party cloud. Disclosed legal entity: Atlassian GmbH (Germany, EU).
Usage statistics for the frontend applications are stored and processed by Mixpanel. Location: USA. Cloud, delivered through third-party cloud. Disclosed legal entity: Mixpanel Inc.
LastPass is used to manage secrets. Location: Ireland. Cloud, delivered through third-party cloud. Disclosed legal entity: LogMeIn Inc. See vendor transparency notes on the LastPass separation from LogMeIn/GoTo.
Subcontractor used for first-line support for Cognite Data Fusion and applications. Location: Sri Lanka. Support, not cloud hosting. Disclosed legal entity: Creative Software Ltd.
Used for managing support tickets. Data sent to support will be stored and processed in this service. Location: USA. Cloud, delivered through third-party cloud. Disclosed legal entity: Zendesk Inc.
Applies to robotic services only. Used for relaying video streams from robots to InRobot users. Location: USA. Cloud, delivered through third-party cloud. Cognite discloses this supplier as 'Twilio Video', which is a product name rather than a legal entity.
Legal, privacy, and compliance documentation
Whitepaper covering the security and trust framework for Cognite Atlas AI, the low-code industrial AI agent builder. Most directly relevant document for AI-specific assurance and EU AI Act evidence.
EcoVadis sustainability rating, January 2025, Committed level. ESG rather than security.
Cloud Security Alliance STAR Level 1 self-assessment listing.
SOC 3 general-use report.
GDPR compliance statement listed under Compliance on the trust centre.
Environmental management system certification.
Quality management system certification.
Code of practice for protection of personally identifiable information in public clouds acting as PII processors.
Information security management system certification, listed under Compliance on the Cognite trust centre. Certificate available for download from the trust centre.
2025-26 audit period completed with an unqualified opinion from an independent third-party auditor against the AICPA Trust Services Criteria, per a trust centre update. Report available on request through the trust centre.
SafeBase-hosted trust centre. Covers compliance certifications, reports, product and data security, infrastructure, corporate security, data privacy, legal and ethics, ESG and self-assessments. Page last updated 29 July 2026.
Published vulnerability disclosure policy hosted in Cognite's product documentation. Note this is a disclosure process, not a general information security policy; no standalone security policy document is published.
Whitepaper on NERC CIP alignment, relevant to North American bulk electric system customers.
Whitepaper mapping Cognite's controls to the NIST Cybersecurity Framework.
Authoritative source for the subprocessor list held against this vendor record. Matches the SafeBase export dated 31 July 2026 with entries created 31 March 2026.
Consensus Assessments Initiative Questionnaire self-assessment, under Self-Assessments on the trust centre.
Third-party penetration test report, gated behind access request on the trust centre.
Get insights into risk by running assessments on this AI application.
Types of data commonly processed by this application
Discover EU-based alternatives for this AI application.
Track, assess, and govern your AI applications with Anove.
