Security & Compliance

PCI DSS 4.0.1

SOC 2

SOC 2 is a voluntary compliance standard for service organizations, developed by the American Institute of CPAs (AICPA), which specifies how organizations should manage customer data. The standard is based on the following Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.

ISO 42001 v2023

ISO/IEC 42001:2023 provides a management framework for organizations to integrate artificial intelligence (AI) systems responsibly. It addresses AI governance, risk management, ethical considerations, and compliance with regulatory and industry standards. The framework ensures AI systems are transparent, accountable, and aligned with organizational objectives while minimizing potential risks associated with their deployment.

GDPR

The General Data Protection Regulation, a comprehensive data protection law in the EU, governs how organizations must protect personal data and privacy.

ISO 27001 v2022

The updated version of the ISO 27001 standard, reflecting the latest best practices and improvements in information security management.

HIPAA

The Health Insurance Portability and Accountability Act, a U.S. law that mandates standards for protecting sensitive patient health information.

CPRA (formerly CCPA)

The California Consumer Privacy Act provides data privacy rights to California residents, allowing them control over how their personal information is collected and used.

Penetration Test