Indigenous Data Authority

What Indigenous Data Authority does

Indigenous Data Authority (IDA) is an Indigenous-led governance and certification body that provides governance assessments, assurance, and certification for organisations engaging with Indigenous-related data or AI systems. IDA's core product is a tiered certification framework — Tier One (limited/low-risk use), Tier Two (moderate/operational use), and Tier Three (high-risk, AI-enabled, or large-scale environments) — delivered through a structured journey of pre-audit assessment, pre-certification audit, and ongoing assurance. The framework is aligned with OCAP (Ownership, Control, Access, Possession), CARE (Collective Benefit, Authority to Control, Responsibility, Ethics), and Te Mana Raraunga principles, and governs how Indigenous data is handled across the full data lifecycle rather than where it is stored. IDA extends its scope beyond raw data inputs to automated decisions, predictive outputs, derived data, and downstream AI uses, asserting that Indigenous authority applies across the full ecosystem of collection, analysis, sharing, reuse, and AI inference.

IDA operates across Aotearoa New Zealand, Australia, and internationally, and serves organisations in the private sector, public sector, research, health, education, and emerging technologies that collect, use, share, or govern data relating to Indigenous peoples, communities, lands, cultures, knowledge systems, or identities. Its distribution is direct and consultative — clients initiate contact through the website and are guided through a tiered certification journey by IDA itself, with no self-serve product, marketplace listing, or channel reseller model in evidence. Services are priced on a quote-based, multi-year recurring basis that aligns with the multi-year contract cadence typical of certification programs, although IDA does not publicly disclose specific pricing tiers or fee schedules.

The business is positioned as a quasi-regulatory rather than purely commercial entity: a non-profit, Indigenous-led body operating in a governance space where existing privacy, ethics, and AI frameworks do not recognise Indigenous authority, collective rights, or relational accountability. The company cites 260+ client reviews on its website, is actively operating, and is led by Founder Lisa Pizzoni, with no disclosed parent company, institutional investors, funding rounds, patents, or strategic partnerships. Its defensibility rests on Indigenous mandate, first-mover regulatory positioning, and alignment with globally recognised data sovereignty principles rather than on proprietary technology, capital base, or network scale.

Name

Indigenous Data Authority

Legal name

Indigenous Data Authority

Website

https://indigenousdataauthority.world

Company type

Private

Operating status

Operating

Short description

Indigenous Data Authority is an Indigenous-led governance and certification body that provides governance assessments, assurance, and certification for organisations engaging with Indigenous-related data and AI systems across Aotearoa New Zealand, Australia, and internationally.

Ownership category

akta.pro rank

Product category

Data Governance Certification

NAICS

American Indian and Alaska Native Tribal Governments (921150), American Indian and Alaska Native Tribal Governments (92115)

SIC

Services-Membership Organizations (8600)

akta.pro primary industry

Tribal/Indigenous Public Health Authorities (HLAJAAAD)

akta.pro secondary industries

Indigenous/Tribal Education Authorities & Boards (EDADABAM), Stakeholder Engagement, Indigenous/Tribal Consultation & Social Impact (SIA) (EUAHAAAH)

Keywords

• Indigenous data governance
• Data sovereignty certification
• Data compliance audit
• Indigenous AI governance
• OCAP CARE compliance

Headquarters

HQ city

Innovation City

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Certification and Assurance Services: IDA generates revenue through governance assessments, pre-audit assessments, pre-certification audits, and ongoing certification services. The tiered certification levels (Tier One, Two, Three) likely correspond to different service scopes and pricing levels based on the risk and scale of Indigenous data engagement.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

Indigenous Data Authority (IDA) provides Indigenous-led governance assessments, assurance, and certification for organisations that engage with Indigenous-related data or AI systems. The offering comprises a tiered certification framework (Tier One through Tier Three) preceded by a pre-audit assessment and pre-certification audit, and supported by ongoing assurance. IDA governs how data is handled — not where it is stored — across the full data lifecycle, aligned with OCAP, CARE, and Te Mana Raraunga principles.

Product overview

Indigenous Data Authority (IDA) is a governance and certification body offering a single unified framework for Indigenous data governance. The core offering consists of the Indigenous Data Authority Certification program, which includes Pre-Audit Assessment and Pre-Certification Audit phases, along with three certification tiers (Tier One, Tier Two, Tier Three) based on risk levels. Supporting services include Indigenous Data Exposure Mapping, Authority/Consent/Custodianship Analysis, AI and Inferred Data Risk Identification, Governance Maturity Assessments, and Ongoing Assurance. IDA's framework is aligned with OCAP, CARE, and Te Mana Raraunga principles and spans the private sector, public sector, research, health, education, and emerging technologies.

Differentiator

Problem solved

Functional benefit

Products and services

• Pre-Audit Assessment

Quantifiable outcome

• 25% of Indigenous data is misclassified or inconsistently identified in current systems — highlighting the scale of governance failure that IDA's framework addresses.
• +2 more outcomes

Named customers1 record

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• OneTrust: Enterprise platform for privacy, security, and data governance with mature audit/certification tooling. Represents the incumbent tooling layer that IDA's certification would have to integrate with — and a potential competitor if OneTrust adds Indigenous-specific modules.
• ISACA: Global professional association issuing IT governance, risk, and security certifications (CISA, CISM, CRISC). Comparable as a long-standing standards/certification body that could plausibly extend governance frameworks to cover Indigenous data concerns.
• ISO (International Organization for Standardization): International standards body issuing ISO 27001, 27701, 42001 (AI management) and related frameworks that enterprise buyers already procure. ISO is the incumbent standards layer that IDA's certification must coexist with — and against which enterprises will compare IDA's value.
• International Association of Privacy Professionals (IAPP): Largest global privacy professional association offering certifications (CIPP, CIPM, CIPT) and standards guidance. Comparable as a professional certification body in the data/privacy space, but with generalist privacy focus rather than Indigenous-specific governance.

Direct peers

• Local Contexts: Indigenous-led initiative developing labels and notices for Indigenous data, traditional knowledge, and cultural heritage in digital environments. Closely comparable to IDA in mission (Indigenous data sovereignty) and approach (culturally grounded governance tooling), though focused on attribution/labels rather than enterprise certification.
• First Nations Information Governance Centre (FNIGC): Canadian First Nations organization that owns OCAP (Ownership, Control, Access, Possession) principles — one of the core frameworks IDA aligns to. Comparable as an Indigenous-led governance body setting standards for Indigenous data, though focused on research/health data in Canada.
• Te Mana Raraunga (Māori Data Sovereignty Network): Māori-led network advocating for Māori data sovereignty and producing principles IDA explicitly aligns its framework to. Operates in the same Indigenous data governance category with focus on Aotearoa New Zealand — directly overlapping with IDA's NZ footprint.
• Global Indigenous Data Alliance (GIDA): International network of Indigenous data sovereignty advocates that articulated the CARE Principles for Indigenous Data Governance. GIDA is the intellectual foundation IDA builds on for its CARE-aligned certification framework, making it a peer and thought-leader in the same niche.

Emerging players

• B Lab / B Corporation Certification: Non-profit certification body that issues tiered, mission-driven certifications to companies meeting social/environmental standards. Comparable business model (non-profit certifier, tiered assessments, recurring verification) though applied to corporate social performance rather than data governance.
• Data & Trust Alliance: Cross-industry coalition developing data provenance, AI, and trust frameworks for enterprise use. Comparable as a multi-stakeholder standards body addressing AI/data governance, but operating from a corporate rather than Indigenous-led perspective.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/indigenous-data-authority

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Indigenous Data Authority