Security compliance you can prove
Certinal is built to meet the strictest security and privacy standards, so every signature, workflow and record stands up to enterprise, government and auditor scrutiny.
- SOC 1 & 2 Type 2
- ISO 27001
- IRAP
- FIPS 140-2
- APEC PRP
Certifications & standards
The most exhaustive coverage of security compliance
Independently certified and continuously assessed against the frameworks that global enterprises and regulators rely on.
ISO 27001:2013
Specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization.
SSAE SOC 1 & SOC 2 Type 2
Independent attestation of the internal controls that capture how Certinal safeguards customer data - and how effectively those controls operate over time.
TrustArc APEC PRP
The Asia-Pacific Economic Cooperation Privacy Recognition for Processors certification represents the requirements a processor must meet to be recognized as qualified by data controllers.
3rd-party VAPT
Vulnerability Assessment and Penetration Testing by an independent firm, designed to identify and help address cyber-security vulnerabilities before attackers can.
IRAP
The Information Security Registered Assessors Program - a comprehensive independent assessment of a system's security against Australian government policies and guidelines.
ISO 9594-8
Specifies the data objects used to represent public-key certificates and the revocation notices for issued certificates that should no longer be trusted.
FIPS 140-2
The US and Canadian government standard specifying the security requirements for the cryptographic modules that protect sensitive information.
FIPS 186-4
The standard specifying the suite of algorithms that can be used to generate a secure digital signature.
See Certinal's security in action
Get a walkthrough of the controls, certifications and audit trail behind every Certinal agreement.
