How our ISO 27001 certification benefits our clients

Businesses are collecting more data than ever before. Think about what’s required to make a purchase online: Name, address, card numbers, contact details, sometimes even date of birth. That is a lot of data to be in charge of, and all of that information could be gathered for something as simple as buying new bathroom sponges. Imagine the data that your doctor’s web platform holds on you, or your dating profiles. A security breach would be a big deal. 

Brew Digital builds and maintains a range of websites, and that comes with responsibility, because anybody who has access to a site can become a vector for attack. In a commitment to our customers (and in turn, their customers), we do everything we can to provide first-class services, and that’s why we have invested in becoming ISO 27001 certified – ensuring that our approach to information security is aligned with international standards. 

What is ISO 27001?

ISO 27001 is an internationally recognised security standard that provides a “best practices” framework for establishing, implementing, running, managing, monitoring, reviewing and improving an Information Security Management System (ISMS). The standard is jointly published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). 

What does it mean to be ISO 27001 certified?

To be ISO 27001 certified means being certified to the requirements of the standard, and proving that there is a systematic, holistic, and ongoing approach to the secure storage of sensitive information – both digital, physical and on paper. 

This is all verified through a thorough external certification process, completed by an independent, accredited body. There are then annual surveillance audits, and recertification audits conducted every three years to ensure continued compliance. Brew certification was performed by the internationally recognised certification body British Standard Institute (BSO). 

What does ISO 27001 certification mean for our customers?

We put our customers at the heart of everything we do, and we believe that the work of securing our ISO 27001 certification – and the continued work of maintaining it – is valuable to ensure we can provide the best possible service. 

Data protection you can trust

At its core, the ISO 27001 certification demonstrates a commitment to robust data protection. This means that you can rest easy knowing that Brew Digital will protect you and your customer’s data securely and responsibly.

We’re regularly audited

To remain certified we need to pass regular security audits. This means we are constantly evaluating and, where possible, improving our systems and processes to keep data securely managed. You can trust that Brew Digital will look after your data. 

Regulatory compliance

In certain industries and markets, robust and reliable data security is a requirement, not a nice to have. While ISO 27001 certification is not in itself a legal requirement, our adherence to it means you can rest assured that we are capable of meeting a customer’s requirement of privacy laws like GDPR and CCPA. 

Brew Digital is part of The Adaptavist Group, which is also fully ISO 27001 certified. This means every company within our family of brands has the same level of commitment to your data. We’re also one of only a small number of partners on the Atlassian Marketplace that are ISO certified – a demonstration of our continued commitment to strive for excellence in data security.