Continuously monitoring
ISO/IEC 27701
The privacy extension to ISO 27001, covering Cases as both processor and controller of personal data.
Scope
Personal data processed in Cases, with Cases as processor for customer data and as controller for account and billing data.
Where we are
Privacy controls extend the ISMS: records of processing, data protection impact assessments, subject rights handling and processor obligations, monitored continuously.