Penneo is certified to ISO 27001 (information security) and ISO 27701 (privacy information management).
Certificates
You can download the current ISO 27001 and ISO 27701 certificates at penneo.com/iso-certificates.
Statements of Applicability
The Statements of Applicability give an overview of the controls we have in scope. They are public: Statements of Applicability folder.
ISAE 3000, ISAE 3402 and SOC reports
Penneo does not have an ISAE 3402 or SOC report. An ISAE 3000 report can be requested from Support.
Data processor oversight, audit questions and penetration tests
For questions about your yearly oversight of Penneo as a data processor, penetration test reports or other security documents, write to compliance@penneo.com.