The provider
Provides the service tools, ensures data is processed correctly, complies with the law and standardizes subcontracting.
ISO/IEC 27018 · Personal data in the cloud
ISO 27018: protecting personal data (PII) in the cloud
If you provide cloud services, assure your customers that their personal data is protected.
What is ISO 27018?
Your data, used only for what you authorized
As cloud services grow, so does concern about protecting personal data.
Built on the ISO 27001 family, ISO 27018 encourages cloud providers to adopt a certifiable infrastructure that protects their customers' personal data.
It ensures hosted data is not used for any purpose other than the one stated and consented to by its owners.
Measures
Commitments for provider and customer
The customer
Controls how its data is processed, has security commitments in the contract, can limit uses and must give prior authorization for any commercial purpose.
Benefits
What your organization gains
Trust
More trust and security for your customers.
Competitive advantage
A differentiator in the cloud market.
Protection
The highest level of personal data protection.
Fewer breaches
Reduces data breaches in your systems.
Lower risk
Applies the controls needed to manage personal information.
Growth
Helps grow your business.
Credentials
Cloud privacy specialists
Protect your customers' data in the cloud
Our auditors are qualified in ISO 27018. Let's talk.