Management system certification
ISO/IEC 27018:2019
Controls for public cloud providers acting as processors of personal data: disclosure handling, return and deletion, sub-processor transparency, and restrictions on using customer data for marketing.
What you receive
Certificate of Registration (sector extension)
Issued only by a body accredited to ISO/IEC 17021-1, alongside 27001.
Who needs it
Public cloud and multi-tenant SaaS providers processing customer personal data.
Prerequisites
A current or concurrent ISO/IEC 27001 certification.
How this engagement is delivered
Audited and certified by Securo Cert LLC.
Accredited artifactThe partner body is named in the proposal before any work begins, and printed on the resulting document alongside the delivery mode.
Frequent questions
What do we actually receive?
Certificate of Registration (sector extension). Issued only by a body accredited to ISO/IEC 17021-1, alongside 27001.
How long is it valid?
Aligned to the underlying 27001 cycle.
What has to be in place first?
A current or concurrent ISO/IEC 27001 certification.