Indigenous Data Authority
Indigenous Data Authority is an Indigenous-led governance and certification body that provides governance assessments, assurance, and certification for organisations engaging with Indigenous-related data and AI systems across Aotearoa New Zealand, Australia, and internationally.
- Company typePrivate
- Founded-
- HeadquartersInnovation City, United States
- Headcount—
- GTM typeB2B
- OfferingServices
What Indigenous Data Authority does
Indigenous Data Authority (IDA) is an Indigenous-led governance and certification body that provides governance assessments, assurance, and certification for organisations engaging with Indigenous-related data or AI systems. IDA's core product is a tiered certification framework — Tier One (limited/low-risk use), Tier Two (moderate/operational use), and Tier Three (high-risk, AI-enabled, or large-scale environments) — delivered through a structured journey of pre-audit assessment, pre-certification audit, and ongoing assurance. The framework is aligned with OCAP (Ownership, Control, Access, Possession), CARE (Collective Benefit, Authority to Control, Responsibility, Ethics), and Te Mana Raraunga principles, and governs how Indigenous data is handled across the full data lifecycle rather than where it is stored. IDA extends its scope beyond raw data inputs to automated decisions, predictive outputs, derived data, and downstream AI uses, asserting that Indigenous authority applies across the full ecosystem of collection, analysis, sharing, reuse, and AI inference.
IDA operates across Aotearoa New Zealand, Australia, and internationally, and serves organisations in the private sector, public sector, research, health, education, and emerging technologies that collect, use, share, or govern data relating to Indigenous peoples, communities, lands, cultures, knowledge systems, or identities. Its distribution is direct and consultative — clients initiate contact through the website and are guided through a tiered certification journey by IDA itself, with no self-serve product, marketplace listing, or channel reseller model in evidence. Services are priced on a quote-based, multi-year recurring basis that aligns with the multi-year contract cadence typical of certification programs, although IDA does not publicly disclose specific pricing tiers or fee schedules.
The business is positioned as a quasi-regulatory rather than purely commercial entity: a non-profit, Indigenous-led body operating in a governance space where existing privacy, ethics, and AI frameworks do not recognise Indigenous authority, collective rights, or relational accountability. The company cites 260+ client reviews on its website, is actively operating, and is led by Founder Lisa Pizzoni, with no disclosed parent company, institutional investors, funding rounds, patents, or strategic partnerships. Its defensibility rests on Indigenous mandate, first-mover regulatory positioning, and alignment with globally recognised data sovereignty principles rather than on proprietary technology, capital base, or network scale.
Indigenous Data Authority firmographics
Firmographics- Name
- Indigenous Data Authority
- Legal name
- Indigenous Data Authority
- Website
- https://indigenousdataauthority.world
- Company type
- Private
- Operating status
- Operating
- Short description
- Indigenous Data Authority is an Indigenous-led governance and certification body that provides governance assessments, assurance, and certification for organisations engaging with Indigenous-related data and AI systems across Aotearoa New Zealand, Australia, and internationally.
- Ownership category
- akta.pro rank
Indigenous Data Authority industry classification
Industry- Product category
- Data Governance Certification
- NAICS
- American Indian and Alaska Native Tribal Governments (921150), American Indian and Alaska Native Tribal Governments (92115)
- SIC
- Services-Membership Organizations (8600)
- akta.pro primary industry
- Tribal/Indigenous Public Health Authorities (HLAJAAAD)
- akta.pro secondary industries
- Indigenous/Tribal Education Authorities & Boards (EDADABAM), Stakeholder Engagement, Indigenous/Tribal Consultation & Social Impact (SIA) (EUAHAAAH)
Keywords
Where Indigenous Data Authority is headquartered
LocationHeadquarters
- HQ city
- Innovation City
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Indigenous Data Authority business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D
Revenue model
- Certification and Assurance Services: IDA generates revenue through governance assessments, pre-audit assessments, pre-certification audits, and ongoing certification services. The tiered certification levels (Tier One, Two, Three) likely correspond to different service scopes and pricing levels based on the risk and scale of Indigenous data engagement.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Tiered certification based on risk level — Tier One (limited/low-risk use), Tier Two (moderate/operational use), Tier Three (high-risk, AI-enabled, large-scale environments). |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels3 records
Indigenous Data Authority product offering
Product offeringCore offering
Indigenous Data Authority (IDA) provides Indigenous-led governance assessments, assurance, and certification for organisations that engage with Indigenous-related data or AI systems. The offering comprises a tiered certification framework (Tier One through Tier Three) preceded by a pre-audit assessment and pre-certification audit, and supported by ongoing assurance. IDA governs how data is handled — not where it is stored — across the full data lifecycle, aligned with OCAP, CARE, and Te Mana Raraunga principles.
Product overview
Indigenous Data Authority (IDA) is a governance and certification body offering a single unified framework for Indigenous data governance. The core offering consists of the Indigenous Data Authority Certification program, which includes Pre-Audit Assessment and Pre-Certification Audit phases, along with three certification tiers (Tier One, Tier Two, Tier Three) based on risk levels. Supporting services include Indigenous Data Exposure Mapping, Authority/Consent/Custodianship Analysis, AI and Inferred Data Risk Identification, Governance Maturity Assessments, and Ongoing Assurance. IDA's framework is aligned with OCAP, CARE, and Te Mana Raraunga principles and spans the private sector, public sector, research, health, education, and emerging technologies.
Differentiator
Problem solved
Functional benefit
Products and services
- Pre-Audit Assessment
Quantifiable outcome
- 25% of Indigenous data is misclassified or inconsistently identified in current systems — highlighting the scale of governance failure that IDA's framework addresses.
- +2 more outcomes
Companies that use Indigenous Data Authority
Customer profileNamed customers1 record
Segments2 records
Ideal customer profiles2 records
Indigenous Data Authority technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
Indigenous Data Authority partnerships and signals
Strategic signalScale indicators4 records
Recent moves5 records
Expansion highlights5 records
Indigenous Data Authority competitors and assessment
Company assessmentBroad incumbents
- OneTrust: Enterprise platform for privacy, security, and data governance with mature audit/certification tooling. Represents the incumbent tooling layer that IDA's certification would have to integrate with — and a potential competitor if OneTrust adds Indigenous-specific modules.
- ISACA: Global professional association issuing IT governance, risk, and security certifications (CISA, CISM, CRISC). Comparable as a long-standing standards/certification body that could plausibly extend governance frameworks to cover Indigenous data concerns.
- ISO (International Organization for Standardization): International standards body issuing ISO 27001, 27701, 42001 (AI management) and related frameworks that enterprise buyers already procure. ISO is the incumbent standards layer that IDA's certification must coexist with — and against which enterprises will compare IDA's value.
- International Association of Privacy Professionals (IAPP): Largest global privacy professional association offering certifications (CIPP, CIPM, CIPT) and standards guidance. Comparable as a professional certification body in the data/privacy space, but with generalist privacy focus rather than Indigenous-specific governance.
Direct peers
- Local Contexts: Indigenous-led initiative developing labels and notices for Indigenous data, traditional knowledge, and cultural heritage in digital environments. Closely comparable to IDA in mission (Indigenous data sovereignty) and approach (culturally grounded governance tooling), though focused on attribution/labels rather than enterprise certification.
- First Nations Information Governance Centre (FNIGC): Canadian First Nations organization that owns OCAP (Ownership, Control, Access, Possession) principles — one of the core frameworks IDA aligns to. Comparable as an Indigenous-led governance body setting standards for Indigenous data, though focused on research/health data in Canada.
- Te Mana Raraunga (Māori Data Sovereignty Network): Māori-led network advocating for Māori data sovereignty and producing principles IDA explicitly aligns its framework to. Operates in the same Indigenous data governance category with focus on Aotearoa New Zealand — directly overlapping with IDA's NZ footprint.
- Global Indigenous Data Alliance (GIDA): International network of Indigenous data sovereignty advocates that articulated the CARE Principles for Indigenous Data Governance. GIDA is the intellectual foundation IDA builds on for its CARE-aligned certification framework, making it a peer and thought-leader in the same niche.
Emerging players
- B Lab / B Corporation Certification: Non-profit certification body that issues tiered, mission-driven certifications to companies meeting social/environmental standards. Comparable business model (non-profit certifier, tiered assessments, recurring verification) though applied to corporate social performance rather than data governance.
- Data & Trust Alliance: Cross-industry coalition developing data provenance, AI, and trust frameworks for enterprise use. Comparable as a multi-stakeholder standards body addressing AI/data governance, but operating from a corporate rather than Indigenous-led perspective.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Indigenous Data Authority social profiles
Digital presenceIndigenous Data Authority compliance and trust
Trust signalCompliance3 records
Indigenous Data Authority financial estimates
Financial estimateRevenue estimate
Valuation estimate
Indigenous Data Authority leadership team
Management profileNumber of profiles
Profiles2 records
Indigenous Data Authority funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Indigenous Data Authority M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Indigenous Data Authority
What does Indigenous Data Authority do?
Indigenous Data Authority (IDA) provides Indigenous-led governance assessments, assurance, and certification for organisations that engage with Indigenous-related data or AI systems. The offering comprises a tiered certification framework (Tier One through Tier Three) preceded by a pre-audit assessment and pre-certification audit, and supported by ongoing assurance. IDA governs how data is handled — not where it is stored — across the full data lifecycle, aligned with OCAP, CARE, and Te Mana Raraunga principles.
Is Indigenous Data Authority a public or private company?
Indigenous Data Authority is a private company. It is classified as nonprofit foundation owned and is currently operating.
When was Indigenous Data Authority founded?
Indigenous Data Authority was founded in -1.
Where is Indigenous Data Authority based?
Indigenous Data Authority is headquartered in Innovation City, United States, in the North America region.
How does Indigenous Data Authority make money?
One revenue line is on record: certification and Assurance Services.
Who are Indigenous Data Authority's main competitors?
Broad incumbents on record are OneTrust, ISACA, ISO (International Organization for Standardization) and International Association of Privacy Professionals (IAPP). Direct peers are Local Contexts, First Nations Information Governance Centre (FNIGC), Te Mana Raraunga (Māori Data Sovereignty Network) and Global Indigenous Data Alliance (GIDA). Emerging players are B Lab / B Corporation Certification and Data & Trust Alliance.
Does Indigenous Data Authority have an API?
No public API is recorded for Indigenous Data Authority.
What industry is Indigenous Data Authority in?
Indigenous Data Authority's product category is Data Governance Certification. Its primary akta.pro industry code is HLAJAAAD, Tribal/Indigenous Public Health Authorities, with a secondary code of EDADABAM, Indigenous/Tribal Education Authorities & Boards. Its NAICS code is 921150 and its SIC code is 8600.