We are proud to announce we achieved ISO/IEC 27001 certification. This international standard of information security management recognizes our commitment to protecting sensitive information and our ongoing efforts to ensure the security of our infrastructure and operations.
The process of obtaining the certification was a comprehensive and collaborative effort. To start, we engaged a reputed ISO 27001 consultant to perform a detailed risk assessment and internal audit. As we were already SOC 2 compliant, our security team began by understanding how our SOC 2 controls aligned with the ISO framework and prioritized any gaps.
Based on prioritizing the significant gaps, we formed a Governance, Risk & Compliance (GRC) committee to communicate the importance and requirements of the ISO framework going forward. The ISO certification requires a strong emphasis on security programs and culture, which calls for a thorough internal audit of our existing security programs.
The certification process consisted of two audit stages to properly validate the efficacy and implementation of the company’s policies and controls. Once the remediation was completed, we brought in our external auditors to conduct the Stage 1 audit to get the green light that AlphaSense was ready to go through the final stage of the audit. Our entire process, from preparation to certification, took six months.
Achieving ISO27001 certification is a significant accomplishment for AlphaSense and a step towards our goal of fueling hypergrowth. It serves as an expression of trust in our commitment to protecting information and reinforces our role as a trusted data broker for our clients.
We are excited to share this milestone with our customers, partners, and stakeholders and remain dedicated to providing the best possible service. To get a copy of our ISO 27001 certificate, please visit our Trust Center.
If you have any questions about our certification or information security, please reach out to us.