Indra Group Earns AENOR Responsible AI Certification for Copilot Studio Agents

Indra Group has become the first Spanish company to receive AENOR’s “Responsible AI Technology based on Microsoft tools” certification, validating the way it designs, deploys and operates selected AI agents built with Microsoft technology.
The certification was presented in Madrid on July 13, with Indra Group, AENOR and Microsoft Spain represented at the event. As reported by Indra Group, the assessment is intended to test real operational controls rather than simply endorse a set of AI principles or a policy document.

What AENOR assessed​

AENOR’s scheme focuses on AI agents developed with Microsoft tools and assessed against Indra’s internal agent-development methodology. The controls cover traceability, safeguards, data quality, cost management, technical configuration, version control, testing and evidence collection across an agent’s lifecycle.
That distinction matters. Enterprise AI governance is increasingly less about the underlying model alone and more about the system wrapped around it: what data it can access, who can change its instructions, how its output is monitored, and whether an organization can show evidence that those controls were applied.
Microsoft and AENOR began collaborating on an ethical and responsible AI certification framework in September 2024. Microsoft said at the time that the work would draw on international standards, including ISO/IEC 42001, as well as Microsoft’s responsible-AI principles and European AI regulation.

Two Copilot Studio agents in scope​

The certification does not appear to cover every AI deployment across Indra Group. It applies to two specific agent use cases built with Microsoft Copilot Studio:

• An onboarding assistant for employees joining the group.
• A regulatory-compliance supervisor supporting verification and continuous improvement for Indra’s ISO/IEC 20000 management system.

Indra said its method divides agent delivery into six stages: identifying business requirements, understanding data, preparing and labeling data, designing and configuring the agent, internal evaluation and piloting, then iterative deployment and maintenance.
That is a useful limitation to keep in mind for IT teams reading the announcement. A certification of particular agents and their operating processes is not a blanket assurance that all generative-AI output is accurate, safe or suitable for unsupervised decisions. It is evidence that the certified use cases have documented controls and an auditable management process.

Why it matters for Microsoft shops​

For organizations rolling out Copilot Studio agents, the announcement is another sign that governance is becoming a deliverable alongside the bot itself. Microsoft’s responsible-AI framework emphasizes fairness, reliability and safety, privacy and security, inclusiveness, transparency and accountability, but customers remain responsible for how they configure and operate their own applications.
The practical message for Windows and Microsoft 365 administrators is straightforward: treat agents as managed production systems. Define approved data sources, retain configuration and test records, establish owners, log changes, set spending controls, and keep humans in the loop for compliance or HR workflows.
Indra’s certification may offer a model for organizations looking to formalize those controls, but it currently applies only to the two named Copilot Studio agents.

---

References​

1. Primary source: Atalayar
   Published: 2026-07-13T15:00:00+00:00
   
   

   Indra Group, the first Spanish company to be certified by AENOR for the responsible use of artificial intelligence

   Artificial intelligence can improve the onboarding processes for professionals joining large companies, as well as the monitoring and improvement of manageme...

   www.atalayar.com
2. Related coverage: indragroup.com
   
   

   Icon Isotype

   Indra Group ha obtenido la primera certificación de AENOR de “Tecnología de IA Responsable basada en herramientas Microsoft”, que certifica la aplicación efectiva de los principios de IA responsable en agentes de IA evaluados; siendo, por ello un reconocimiento al uso responsable de las...

   www.indragroup.com
3. Official source: learn.microsoft.com
   
   

   Información general sobre inteligencia artificial - Microsoft Service Assurance | Microsoft Learn

   Más información sobre la inteligencia artificial en Microsoft Online Services

   learn.microsoft.com

 

[ChatGPT]

Indra Group has become the first Spanish company to receive AENOR’s “Responsible AI Technology based on Microsoft tools” certification, validating two internal AI agents built with Microsoft Copilot Studio. The certification was presented in Madrid on July 13, with representatives from Indra, AENOR and Microsoft Spain in attendance.
As reported by Microsoft, the assessment covers more than a policy statement or a model-level review. It examines whether responsible-AI controls are applied in operational use: agent configuration, data quality, traceability, safeguards, cost management, version control and evidence collection across the lifecycle.

What was certified​

The certified systems are modest but relevant corporate use cases:

• An onboarding agent that supports new Indra employees.
• A regulatory-compliance supervisor intended to help verify and continuously improve Indra’s ISO/IEC 20000 management system.

Indra says its internal agent-development methodology was the subject of the review alongside those deployments. The process divides an agent lifecycle into business and responsible-use requirements, data understanding and preparation, agent configuration, testing, staged deployment, and ongoing maintenance.
That focus matters for enterprises using Copilot Studio or similar low-code agent platforms. The biggest governance challenge is often not the underlying foundation model, but the surrounding system: what data an agent can access, which instructions and connectors are in place, how responses are monitored, who owns changes, and whether the organization can demonstrate those decisions after the fact.

A certification built around Microsoft tooling​

AENOR and Microsoft announced their collaboration on a responsible and ethical AI certification in September 2024. The stated aim was to create a framework informed by international standards, including ISO/IEC 42001, Microsoft’s responsible-AI principles, and European AI regulation.
Indra’s certification is therefore specific to AI agents developed with Microsoft technology and to the evaluated use cases. It is not a blanket assurance that every AI system used across Indra is compliant, safe, or certified.
Microsoft’s responsible-AI framework emphasizes fairness, reliability and safety, privacy and security, inclusiveness, transparency, and accountability. For IT teams, the practical translation is familiar governance work: establish clear owners, constrain data access, test behavior before broad rollout, retain operational evidence, and revisit controls when agents, prompts, models, connectors or source data change.

Why Windows and Microsoft 365 shops should care​

Copilot Studio makes it easier for organizations to turn internal knowledge and workflows into conversational agents. That convenience also makes informal deployments more likely. A process such as Indra’s gives administrators a concrete example of the controls auditors and risk teams will expect as agent use moves beyond pilots.
The immediate consequence is that organizations deploying Copilot Studio agents should treat governance, lifecycle management and evidence capture as implementation requirements rather than paperwork to add later.

---

References​

1. Primary source: Atalayar
   Published: 2026-07-13T15:00:00+00:00
   
   

   Indra Group, the first Spanish company to be certified by AENOR for the responsible use of artificial intelligence

   Artificial intelligence can improve the onboarding processes for professionals joining large companies, as well as the monitoring and improvement of manageme...

   www.atalayar.com
2. Official source: news.microsoft.com
   
   

   Indra Group se convierte en la primera compañía española que obtiene la certificación de AENOR “Tecnología de IA Responsable basada en herramientas Microsoft” - Source EMEA

   Indra es la primera organización española certificada conforme a esta solución para demostrar el uso responsable de la inteligencia artificial con tecnología de Microsoft en entornos corporativos reales.

   news.microsoft.com