Compliance and Certifications

rtifications reinforce our operational excellenceAt NTT DATA, we are committed to attaining top-tier industry accreditations in data center and security, providing our valued commercial clients with unwavering confidence in the security of their mission-critical IT systems hosted within our state-of-the-art colocation facilities.

When the time comes for your crucial audits and accreditation procedures, we stand prepared to support you with exclusive facility tours and interviews featuring our team of seasoned experts in IT security and physical security.

Explore our comprehensive list of certifications across various NTT DATA geographies, showcasing our dedication to maintaining the highest standards in the industry.

Compliance and Certification | NTTNTT

NTT DATA compliance and certifications portal

NTT DATA eva complies with the General Data Protection Regulation (GDPR), which regulates the processing of personal data of individuals within the European Union (EU). We offer features such as data minimization, user consent management, and the right to be forgotten, to help its customers comply with GDPR requirements when using its conversational AI solutions. To GDPR internal assessment, please contact us via the support portal at

Portal support.

The HIPAA Security Rule of 2003 requires covered entities to implement or address over 50 administrative, physical, and technical safeguards designed to ensure the confidentiality, availability, and integrity of electronic protected health information (ePHI), including the prevention of unauthorized access to ePHI. The HIPAA Security Rule has become the de facto security standard for the healthcare industry. NTT DATA Services for American clients.

NTT DATA's eva Conversational AI successfully underwent an ISO 27001 audit, validating its alignment with the globally recognized standard for Information Security Management Systems. This internationally acknowledged benchmark underscores our dedication to employing best practices in managing and securing sensitive data. The ISO 27001 audit process is designed to boost the trust and confidence that our customers place in our secure conversational AI platform.

NTT DATA eva Conversational AI, our leading product, complies with the Spanish National Security Scheme (ENS) certification, ensuring the protection of citizen data in electronic procedures. With advanced security measures, Eva guarantees confidentiality, integrity and availability of information. Backed by the ENS, it demonstrates absolute commitment to privacy and user confidence in secure and efficient electronic processes.

NTT DATA eva Conversational AI conducted an independent review and audit for SOC 2 Type I security certification. The SOC2 report will certify that Syntphony Conversational AI has implemented controls over the security, availability and confidentiality of customer data. This includes controls related to data backup and recovery, network security, access control and vulnerability management.

A2SECURE, a PCI DSS QSA company, is conducting a PCI-DSS Project version 4.0.1 for Syntphony Conversational AI, a product of NTT DATA Spain and Affiliates.

The project involves evaluating servers, services, infrastructure, processes, and organizational units involved in cardholder data processing.