Compliance & Certifications

1. Overview

SECVISOR is committed to maintaining the highest standards of security, privacy, and compliance. We understand the critical importance of meeting regulatory requirements and industry standards in the cybersecurity space.

Our platform is designed and operated in compliance with multiple international standards and regulations to ensure the security and privacy of your data.

2. Security Certifications

2.1 SOC 2 Type II

SECVISOR has achieved SOC 2 Type II certification, demonstrating our commitment to security, availability, processing integrity, confidentiality, and privacy.

• Annual third-party audits
• Comprehensive security controls
• Continuous monitoring and improvement
• Detailed audit reports available to customers

2.2 ISO 27001

Our information security management system is certified to ISO 27001:2013, the international standard for information security management.

• Risk-based approach to security
• Comprehensive security policies and procedures
• Regular security assessments and audits
• Continuous improvement processes

2.3 ISO 27017

Cloud-specific security controls in accordance with ISO 27017 for cloud service providers.

2.4 ISO 27018

Protection of personally identifiable information (PII) in public clouds acting as PII processors.

3. Data Protection Compliance

3.1 GDPR Compliance

SECVISOR is fully compliant with the General Data Protection Regulation (GDPR) and serves as both a data controller and processor.

• Data protection by design and default
• Right to access, rectification, and erasure
• Data portability and processing restrictions
• Breach notification procedures
• Data protection impact assessments

3.2 CCPA/CPRA Compliance

Compliance with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

• Consumer rights management
• Data disclosure requirements
• Opt-out mechanisms for data sales
• Service provider obligations

3.3 PIPEDA Compliance

Compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian customers.

4. Industry-Specific Compliance

4.1 HIPAA Compliance

For healthcare organizations, SECVISOR offers HIPAA-compliant features and safeguards.

• Business Associate Agreement (BAA) available
• PHI protection measures
• Audit trails and access controls
• Encryption of data in transit and at rest

4.2 PCI DSS

Payment Card Industry Data Security Standard compliance for organizations handling payment card data.

4.3 SOX Compliance

Sarbanes-Oxley Act compliance for public companies and their service providers.

5. Cloud Security Standards

5.1 FedRAMP

Federal Risk and Authorization Management Program compliance for government customers.

5.2 CSA STAR

Cloud Security Alliance STAR certification demonstrating cloud security excellence.

5.3 Cloud Provider Certifications

Our infrastructure partners maintain their own certifications:

• AWS: SOC 1, SOC 2, ISO 27001, FedRAMP
• Azure: SOC 1, SOC 2, ISO 27001, FedRAMP
• Google Cloud: SOC 1, SOC 2, ISO 27001

6. Security Controls and Measures

6.1 Access Controls

• Multi-factor authentication (MFA)
• Role-based access control (RBAC)
• Privileged access management
• Regular access reviews

6.2 Data Protection

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Data classification and handling
• Secure data disposal procedures

6.3 Network Security

• DDoS protection
• Web application firewall (WAF)
• Intrusion detection and prevention
• Regular security assessments

7. Audit and Monitoring

7.1 Continuous Monitoring

24/7 security monitoring and threat detection across our infrastructure.

7.2 Regular Assessments

• Penetration testing (quarterly)
• Vulnerability assessments (monthly)
• Security code reviews
• Third-party security audits

7.3 Incident Response

Comprehensive incident response plan with defined procedures and escalation paths.

8. Compliance Documentation

We provide comprehensive compliance documentation to our customers:

• Certification reports and attestations
• Security questionnaires and responses
• Compliance matrices and mappings
• Data processing agreements
• Security whitepapers and documentation

9. Third-Party Risk Management

We maintain a robust third-party risk management program:

• Vendor security assessments
• Contractual security requirements
• Ongoing monitoring and reviews
• Incident notification procedures

10. Compliance Updates

We continuously monitor regulatory changes and update our compliance program accordingly. Major updates are communicated to customers through our regular channels.

11. Compliance Support

Our compliance team is available to support your compliance needs:

• Compliance questionnaires and assessments
• Custom compliance reports
• Compliance consultation and guidance
• Regulatory change notifications

12. Contact Information

For compliance-related inquiries, please contact us:

13. Request Compliance Documentation

To request specific compliance documentation or schedule a compliance review, please use the form below:

Request Compliance Documentation