Ory Network is now ISO 27001 Certified

We are happy and proud to announce that from today Ory Network is ISO 27001 certified by BARR.

This certification demonstrates that Ory has been thoroughly audited and found to meet the standards set by the International Organization for Standardization (ISO). In this blog post, we will explore why this achievement is significant not only for us, but also for our customers and how it benefits them.

ISO 27001 is a widely recognized standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an Information Security Management Systems (ISMS). The standard provides a systematic approach to managing sensitive company information and mitigating the risk of security breaches. ISO 27001 certification is recognized globally, and compliance with the standard is often required as a prerequisite for doing business.

Benefits

For our customers, the ISO 27001 certification offers several benefits:

1. It provides assurance that Ory’s ISMS meets internationally recognized best practices for information security management. The certification demonstrates that we have implemented comprehensive controls and processes to protect our customers' data from threats such as cyberattacks, data breaches, and theft.
2. This certification also helps our customers meet their own compliance obligations. By working with a certified vendor, our customers can show auditors and regulators that they have taken appropriate measures to protect sensitive information. This can be particularly important for businesses that handle personal data or operate in regulated industries, such as healthcare, finance or government.
3. It reflects our commitment to transparency and accountability. The certification process involves rigorous third-party auditing, which ensures that Ory's security controls and processes have been independently verified. This provides our customers with greater visibility into Ory's security practices and helps build trust and confidence in the company's services.

Summary

In summary, achieving ISO 27001 certification is a significant milestone for us and our customers. The certification demonstrates our commitment to information security and provides customers with assurance that their data is being managed in a secure and compliant manner. By working with a certified vendor, our customers can meet their own compliance obligations, improve their security posture and build trust with their own customers. Overall, ISO 27001 certification is a testament to our dedication to providing secure and reliable services.

Outlook

But we will not stop here! For our commitment to continuously improve our information security practices and provide a leading privacy-focused user management infrastructure, we are currently working towards obtaining SOC2 Type 2 attestation, another widely recognized standard for information security management and also release new Data Regionality features.

Data Regionality will allow our customers to choose the geographical location where their data is stored, providing them with greater control and improved performance over their data and helping them meet regional compliance requirements as defined by the EU’s GDPR and California’s CCPA. We believe that this will be also a very valuable addition to our Ory Network services and we look forward to sharing more details with you soon.