- AI Confidential
- Posts
- ISO 42001 Data and AI Compliance
ISO 42001 Data and AI Compliance
Plus, an extended call for Confidential Computing Summit speakers.

Dear Readers,
The release of ISO 42001 marks a critical milestone in data management standards. This framework establishes comprehensive requirements for organizations handling sensitive data, from customer records to proprietary algorithms.
ISO 42001 addresses three core principles: data privacy, security, and sovereignty. As organizations increasingly rely on cross-border data flows and AI-driven systems, these principles have become paramount for operational integrity.
Confidential AI represents a significant advancement in meeting these requirements. Implementing end-to-end encryption—covering data at rest, in transit, and during processing—provides unprecedented security throughout the data lifecycle. Moreover, its attestation capabilities and cryptographically verified audit logs ensure compliance with ISO 42001 and other regulatory frameworks, including GDPR, HIPAA, PCI DSS, GLBA, or any other regulatory requirement applied to data and AI.
The emergence of interconnected AI agents has heightened the importance of these security measures. Maintaining data privacy and sovereignty becomes increasingly complex as these agents collaborate, share data, and execute decisions. Confidential AI offers a robust solution to these challenges.
At Opaque Systems, our partnership with ServiceNow demonstrates the practical application of these principles. We've successfully implemented confidential agents that meet ISO 42001 requirements while decreasing deployment efforts.
For further insight, I invite you to view NVIDIA CEO Jensen Huang's perspective on agent technology at ServiceNow.
Opaque Systems remains committed to facilitating seamless ISO 42001 compliance for organizations embracing this new standard.
Aaron Fulkerson
CEO, Opaque Systems
In the Lab
The Latest Happenings at Opaque Systems
Confidential Computing Summit: Call for Speakers Deadline Extended to Feb. 17
If your organization is pushing the boundaries of confidential computing, privacy-preserving AI, or tackling the challenges of secure and trustworthy AI, we want to hear from you!
The Confidential Computing Summit in San Francisco on June 17-18, 2025, is your chance to share insights, real-world use cases, and success stories with an engaged community of industry leaders.
Submit your speaker proposal by February 17 and secure your spot at an "Early Bird" discounted rate. Stay tuned for more updates as the event approaches!
LinkedIn: Opaque Team Talks DeepSeek-R1 Implications
DeepSeek’s breakthrough signals a tipping point: models trained on public data are becoming cheaper, faster, and more accessible. But while DeepSeek makes foundational models more efficient, it doesn’t address the next frontier of AI innovation: unlocking the value of sensitive enterprise data. The challenge isn’t just processing this data—it’s doing so with trust, privacy, and compliance. Opaque’s confidential AI platform bridges this trust gap, enabling customers to gain the most valuable insights from their most sensitive data—securely and with verifiable sovereignty.
Dive deeper into the implications of DeepSeek through insights from Aaron Fulkerson, Opaque CEO, and Chester Leung, Opaque Co-Founder and Head of Platform Architecture.
Webinar: Empowering a New Era of Data Privacy & Responsible AI
In this AI Confidential webinar, Rishabh Poddar, CTO & Co-Founder of Opaque, and Giorgio Natili, Vice President and Head of Engineering, explore how Confidential AI solutions empower organizations to harness AI without compromising their most valuable asset—data. The conversation dives into responsible AI frameworks that prioritize privacy, sovereignty, and transparency, featuring real-world examples that highlight the transformative power of Confidential AI.
White Paper: Architecture and Security
Dive deeper into the technical backbone of Opaque Systems. This white paper breaks down how our platform leverages confidential computing and trusted execution environments (TEEs) to process sensitive data securely while ensuring privacy, integrity, and compliance.
Learn about our architecture, deployment models, cryptographic protocols, and auditability features that enable secure multiparty collaboration and analytics on encrypted data.
Code for Thought
Worthwhile Reads
📍 Location data leaked. A breach involving Gravy Analytics revealed sensitive location data from over 10,000 apps, including GPS coordinates and IP addresses, affecting millions of users. This incident highlights the urgent need for privacy-first solutions. Confidential AI offers a way forward, ensuring robust data protection while enabling advanced analytics.
👍 GenAI for the greater good. GenAI is transforming federal operations, from making public services more accessible to reducing fraud and boosting efficiency. While the potential is huge, responsible adoption is key to maximizing its benefits and minimizing risks. GenAI’s ability to strengthen government processes is nothing short of groundbreaking.
➡️ A shifting regulatory landscape. The early days of the new Trump administration have brought changes to AI regulations, including the revocation of an executive order signed by former President Biden that aimed to establish AI guardrails. As regulatory frameworks shift, the need for solutions that prioritize data privacy and sovereignty becomes even more critical, especially in high-stakes applications.
Reply