ISO 27001 and Microsoft 365 App Certification

Last updated: December 23, 2024

absentify is proud to meet internationally recognized standards for security and data protection. Our certifications reflect our commitment to safeguarding your data and maintaining the trust of our users.

What is ISO 27001?

ISO 27001 is an internationally recognized standard for information security management systems (ISMS). It ensures organizations establish, implement, maintain, and continuously improve their security framework to protect data.

Key aspects of ISO 27001 include:

  • Policy development and documentation: Clear guidelines for handling data, maintaining compliance, and achieving security objectives.
  • Risk management: Identifying and mitigating security risks through systematic processes.
  • Access control: Enforcing role-based access and multi-factor authentication to prevent unauthorized access.
  • Continuous improvement: Regular audits and updates to address new security challenges.
  • Incident response: Defined procedures for handling security incidents, including recovery plans to maintain operational continuity.

By achieving ISO 27001 certification, absentify demonstrates its commitment to protecting the confidentiality, integrity, and availability of customer data.

What is the Microsoft 365 App certification?

The Microsoft 365 App Certification verifies that applications meet Microsoft's stringent standards for security, compliance, and privacy.

Key components include:

  • Application security:
    • Following the secure development lifecycle (SDL) to prevent vulnerabilities like SQL injection.
    • Conducting regular code reviews and automated testing.
  • Operational security:
    • Implementing multi-factor authentication (MFA) and role-based permissions.
    • Monitoring systems in real-time to address potential threats quickly.
  • Data privacy and encryption:
    • Using TLS 1.2+ for secure data transmission and AES-256 for encrypting data at rest.
    • Minimizing data collection and maintaining transparent privacy policies.
  • Incident management:
    • Validated recovery plans to ensure fast response and resolution in case of a breach.

The certification process includes independent reviews by Microsoft security experts and external auditors to verify compliance.

Why are these certifications important?

Our certifications are more than badges of honor—they are foundational to our promise of security and reliability. They ensure that:

  • Security controls are rigorously implemented and continuously monitored.
  • Data is handled transparently and in line with GDPR requirements.
  • Customers can trust absentify with their sensitive information.

These certifications also align with other industry standards, such as SOC 2, which further strengthens our security posture.

How were these certifications achieved?

absentify underwent detailed and independent audits to verify compliance with ISO 27001 and Microsoft’s certification requirements. These audits evaluated:

  • Security and operational practices.
  • Technical safeguards like encryption and monitoring.
  • Organizational processes for incident response and risk management.

Our systems are continuously monitored and improved to stay ahead of emerging threats.

For further details about our certifications or security practices, feel free to contact us at support@absentify.com.