Did you know that many compliance automation software companies actually don't have their own ISO 27001:2022 certification from an accredited certification body? Shocking, right?
We don't want to be one of them. It would feel hypocritical if we partnered with you on compliance while we weren't compliant ourselves. Walk the talk, they said.
We’re proud to announce that FEHA is officially ISO 27001:2022 certified by an accredited certification body!
What’s Our Scope?
You might wonder: what exactly was audited?
The official scope is:
“The Information Security Management System supporting the design, development, maintenance, and management of the Governance, Risk, and Compliance (GRC) software platform and its embedded services.”
In simple words, the audit covered:
- How we design and manage the FEHA compliance platform (including our AI models)
- How we secure both our data and your data stored in the FEHA compliance platform
- How we deliver advisory and internal audit services that come with our packages
Basically: ALL of our internal processes!
We didn’t go for a “partial certification” just to tick the box. Our goal is full transparency and full compliance.
What About SOC 2?
You may ask: why not SOC 2?
Right now, we don’t plan to pursue SOC 2 Type 2. But here’s the key: our processes already meet the same high standards.
And to prove it, we have our live Trust Center, which shows our compliance posture in real time, not just once a year during an audit. Unlike static documents, our Trust Center updates continuously, so you can always see where we stand.
What’s Next?
As FEHA grows and serves more industries across different countries, we’ll keep mapping our ISMS to every framework and regulation that matters to our customers.
Transparency is our principle. That’s why we invite you to visit our Trust Center, check our current certifications, and let us know what frameworks you’d like us to align with.
This certification is another step in showing our commitment: your data is safe with us, and we hold ourselves to the same standards we guide you through.
