Home / Security & trust

Regulated work deserves a regulated-grade partner

Security at Auxality is a certified management system, audited across Auxality operations and applied to every delivery.

Certified

Certified across Auxality operations

Every certification covers all of Auxality: one company, one management system.
ISO27001

ISO 27001

Information security management. The framework behind how client data is classified, handled, encrypted and accessed, audited by an independent certification body.

ISO27701

ISO 27701

Privacy information management, the privacy extension to ISO 27001. It aligns Auxality's handling of personal data with GDPR as a certified discipline, not a policy statement.

ISO20000

ISO 20000

IT service management. The delivery itself, meaning operations, support, change and incident management, runs to a certified standard.

ISO14001

ISO 14001

Environmental management. Auxality manages its environmental impact to a certified standard, with objectives that are followed up and audited independently.

GDPR

Privacy by design. Auxality follows the principle of privacy by design: privacy is built into every solution from the start, and personal data is processed in line with the GDPR.

Audit trail

Every update or change, back to its source

  • Text and version control. Every update and change has its own audit trail, so you remain in control and can prove it.
  • Full data lineage: every number traceable to source data, rule version, timestamp and approval chain.
  • Four-eyes by design. Approval workflows are part of the platform's structure. Nothing reaches an investor or a regulator before approval.
  • The audit view holds exceptions, evidence and sign-off in one place. The trail is yours.
Approval view in Auxality Portal: the new text next to the latest published text, with status, dates and the send-for-approval step

Where your data lives

European-based operations

GDPR by design

Privacy and security by default in every solution. European-based operations, and client data resides within the EU.

Encryption and access control

Client data protected through end-to-end encryption and strict role-based access, verified against the ISO 27001 control set.

Continuous monitoring

Security posture and configuration monitored continuously against the certified baseline, with regular independent audits.