ISO/IEC 27701
Authentic8 maintains ISO/IEC 27701 certification, demonstrating our commitment to the highest international standards for privacy information management. As an extension to ISO/IEC 27001, this globally recognized certification validates our proactive approach to managing privacy risks and protecting Personally Identifiable Information (PII) on behalf of our customers.
Key Highlights of Authentic8’s Compliance
| Focus Area | Scope & Details |
|---|---|
| Privacy Information Management System (PIMS) | Authentic8 has established and maintains a formalized PIMS that extends our existing Information Security Management System (ISMS). This framework governs how we collect, process, and protect personal data across all organizational operations. |
| Global Privacy Standards & GDPR Alignment | Authentic8’s ISO/IEC 27701 certification demonstrates that its privacy information management system is independently assessed against an internationally recognized privacy framework. ISO/IEC 27701 supports alignment with global privacy requirements, including GDPR, by providing structured, auditable controls and guidance for managing personally identifiable information. |
| Data Controller & Processor Accountability | Authentic8 systematically manages privacy responsibilities for both data controllers and processors. This ensures that data is handled only as committed, with robust mechanisms for consent, data minimization, and individual rights. |
Continuous Improvement and Monitoring
Maintaining ISO/IEC 27701 certification is an ongoing commitment to privacy by design. Authentic8 engages in continuous monitoring, regular internal privacy audits, and comprehensive management reviews. Our PIMS is subject to annual surveillance audits by independent, accredited third-party auditors to ensure our privacy practices adapt to an evolving regulatory landscape and the needs of our international customers.
Organizations with a business need to see Authentic8’s ISO/IEC 27001 certification can request it from their Authentic8 account executive or designated point of contact. The certification can also be requested by email to support@authentic8.com. In all cases, a non-disclosure agreement (NDA) is required.