We’re proud to announce that after the successful completion of a series of audits over the spring and summer, Piwik PRO has been certified under the ISO 27001 standard.
For those who are not familiar with this term – ISO 27001 is one of the most widely recognized and internationally accepted information security standards.
It’s best described as an attitude that empowers a business to improve its overall information security policy. It identifies strict requirements and specifications for an Information Security Management System (ISMS), defining how an organization should manage and process information more securely.
In order to achieve the certification, a company must prove it has a systematic approach to managing information security risks affecting the confidentiality, integrity, and availability of company and customer information.
We’re thrilled that our internal processes has meet the high bar set by the certification.
Why ISO 27001 matters
Here at Piwik PRO data privacy is a part of our DNA:
- As a product developer, we are committed to providing the most secure marketing platform available on the market today. Our products help companies meet the stringent requirements of most data privacy regulations around the globe (including HIPAA and GDPR), and offer our clients informative, valuable and actionable insights.
- As a security-conscious provider, we exclusively partner with select ISO 27001-certified Microsoft Azure data centers, located in the Netherlands, US & Germany.
- As a company, we operate in accordance with the best data security practices. Clients from the so-called data-sensitive industries, like finance, healthcare or governments, are a prime testament to our expertise.
However, having the ISO certification is important for us for at least a couple of reasons.
Firstly, it’s hard to overestimate a value of external recognition of our commitment to data privacy. Now, with the ISO 27001 standard in place, our future and existing clients can have even greater confidence that we’re handling valuable data in a way that mitigates as much of the security risk as possible.
Secondly, through this certification, contracts with us just got easier. The institutions like banks or healthcare organizations no longer need to conduct their own compliance assessment when buying our products!
If you want to learn more about our certification or security measures applied by our company, don’t hesitate to contact us! Our team will be happy to answer all your questions!