Microsoft and Indra secure Spain’s first AENOR responsible AI seal

This certification is less about another Copilot deployment and more about operationalising “responsible AI” as a third‑party audited standard. Indra has taken Microsoft’s responsible AI principles and AENOR’s specification and turned them into a concrete lifecycle methodology for building and running AI agents inside a complex enterprise. That is exactly the kind of plumbing you need if large organisations are going to scale dozens or hundreds of autonomous agents without losing control.

In the AGI context, these frameworks are early prototypes of what industrialised agent governance could look like. As models grow more capable and more agentic, regulators and customers will ask not just “what can it do?” but “how do you prove it stays within bounds in production?” Certifications like AENOR’s create a language for auditors, boards, and regulators to interrogate those processes.

It also reinforces Microsoft’s strategy of embedding its stack at the heart of corporate AI operating models. If AENOR and similar bodies treat Microsoft’s tooling as the reference implementation for responsible AI controls, that strengthens Redmond’s position in the enterprise race, especially in jurisdictions where the EU AI Act and sectoral rules will demand documented safeguards.