NEC
- Rank
- Score
- 97/149
- 37 out of 100
NEC Corporation is a Japanese multinational conglomerate headquartered at the NEC Supertower in Minato, Tokyo, and founded in 1899. It supplies information technology and network products and services to businesses and governments. NEC also develops cotomi, its own generative AI core technology offered to customers.
Is cotomi safe?
cotomi scores 37 out of 100 and ranks 97 of 149. Its strongest category is Privacy, and its weakest category is Transparency.
How is cotomi scored?
cotomi is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50group.nec (opens in a new tab) · 20 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50group.nec (opens in a new tab) · 20 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50group.nec (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“We do not knowingly collect or use any information from children (we define "children" as minors younger than 15 years of age on our Website…” MoreLess
“We do not knowingly collect or use any information from children (we define "children" as minors younger than 15 years of age on our Websites).”
group.nec privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“タスクプランニング・遂行における適切なツール選択能力を強化し、AIと外部システムの連携を標準化するMCP（Model Context Protocol）に対応。”
group.nec (opens in a new tab) · 20 Oct 2026 - Yes
Does the model card report test results?
Company claim25/25“cotomiの性能強化” (results shown as an image on the source page)
group.nec (opens in a new tab) · 20 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25group.nec (opens in a new tab) · 20 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25group.nec (opens in a new tab) · 20 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
34Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“If you find a vulnerability in NEC group's products, please contact the following address. Updated our email address and public key to suppo…” MoreLess
“If you find a vulnerability in NEC group's products, please contact the following address. Updated our email address and public key to support Sender Domain Authentication on 2022/12/9. NEC PSIRT Vulnerability Report Contact: psirt-info[@]mlsig.jp.nec.com”
jpn.nec.com security page (opens in a new tab) · 20 Oct 2026 - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33nec.com (opens in a new tab) · 20 Oct 2026 - No
Does it state it holds ISO 27001 certification?
Company claim0/33nec.com (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
80Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“Contact Data: This includes your billing address, email address, and telephone numbers.”
group.nec privacy policy (opens in a new tab) · 20 Oct 2026 - No
Does the privacy policy say whether your data is used to train AI?
Company claim0/20group.nec privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“NEC limits the retention of Personal Data to a proportionate period during which the Personal Data is needed to accomplish the purposes for…” MoreLess
“NEC limits the retention of Personal Data to a proportionate period during which the Personal Data is needed to accomplish the purposes for which it was collected or processed.”
group.nec privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We engage with third-party service providers who may process your Personal Data on our behalf as part of their service provision to us, or f…” MoreLess
“We engage with third-party service providers who may process your Personal Data on our behalf as part of their service provision to us, or for their own legitimate purposes.”
group.nec privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Right to access: You have the right to obtain confirmation on whether NEC processes Personal Data about you and receive a copy of such data,…” MoreLess
“Right to access: You have the right to obtain confirmation on whether NEC processes Personal Data about you and receive a copy of such data, as well as information on how we process your Personal Data.”
group.nec privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100group.nec privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50group.nec privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Right to access: You have the right to obtain confirmation on whether NEC processes Personal Data about you and receive a copy of such data,…” MoreLess
“Right to access: You have the right to obtain confirmation on whether NEC processes Personal Data about you and receive a copy of such data, as well as information on how we process your Personal Data.”
group.nec privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“Right to erasure: You have the right to have your Personal Data deleted, if (i) the Personal Data has been unlawfully processed; (ii) we no…” MoreLess
“Right to erasure: You have the right to have your Personal Data deleted, if (i) the Personal Data has been unlawfully processed; (ii) we no longer need such data for the purposes of the processing; or (iii) the processing is based on consent and you withdraw your consent, and we have no other legal basis for processing the Personal Data.”
group.nec privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
68.5This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. UK competition regulator cases, US Justice Department settlements, last 5 years, and regulator actions and open investigations into the company's AI products at half severity, last 3 years.
1 event
RegulatorUK CMA cases (opens in a new tab) · 12 Nov 2026Date Event Severity 1 Aug 2023 NEC Software Solutions UK / Capita Secure Solutions and Services merger inquiry1 Aug 2023 · Medium Medium No events
RegulatorUS Justice Department (opens in a new tab) · 12 Nov 2026
Court judgments
Not enough dataPrivacy contact and complaints
0Points for each confirmed yes.
- No
Is there a privacy contact, such as an email or a data protection officer?
Company claim0/50group.nec privacy policy (opens in a new tab) · 20 Oct 2026 - No
Does it tell you that you can complain to a regulator?
Company claim0/50group.nec privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
3 Nov 2026
Score 37
Method 3 Nov 2026
-2
28 Oct 2026
Score 39
Method 28 Oct 2026, update 2
-1
23 Oct 2026
Score 40
Method 21 Oct 2026
+2
21 Oct 2026
Score 38
Method 21 Oct 2026
-2
20 Oct 2026
Score 40
Method Not recorded
-