Security. Privacy. Compliance.

We know that trust is important to our customers and partners. Security, privacy, and compliance are the foundation of our solutions.

In March 2022, the external review evaluation of Astadia’s quality systems carried out by BQC Assessment Private Limited was completed successfully. The evaluation confirmed that our quality management system fully meets the requirements of the standards ISO 27001 and ISO 27018.

ISO Certifications

ISO 27001

Image of Astadias ISO 27001 Certification

An ISO/IEC 27001:2013 information security management system is a systematic and pro-active approach to effectively managing risks to the security of your company’s confidential information.

This International Standard has been prepared to provide requirements for establishing, implementing, maintaining and continually improving an information security management system. The adoption of an information security management system is a strategic decision for an organization.  

The information security management system preserves the confidentiality, integrity and availability of information by applying a risk management process and gives confidence to interested parties that risks are adequately managed. Learn more >

 

ISO 27018

Image of Astadia's ISO 27018 Certification

ISO/IEC 27018:2019 is a code of practice that focuses on protection of personal data in the cloud. It is based on ISO/IEC information security standard 27002 and provides implementation guidance on ISO/IEC 27002 controls applicable to public cloud Personally Identifiable Information (PII).

Cloud service providers who process Personally Identifiable Information (PII) under contract to their customers need to operate their services in ways that allow both parties to meet the requirements of applicable legislation and regulations covering the protection of PII.

The requirements and the way in which the requirements are divided between the cloud service provider and its customers vary according to legal jurisdiction, and according to the terms of the contract between the cloud service provider and the customer.  Learn more >