Security you can trust – built into CCH Integrator

CCH Integrator is certified to ISO 27001, the international standard for Information Security Management Systems (ISMS).

Wolters Kluwer’s security policies, standards, and operational practices align with leading global frameworks including ISO 27001 and the NIST Cybersecurity Framework (CSF / SP 800‑53).

CCH Integrator follows ISO 27001‑aligned risk management practices focused on protecting customer information. Risks are identified, assessed, treated, and continuously reviewed, with executive oversight through the Information Security Committee.

CCH Integrator is hosted on Microsoft Azure and uses Wolters Kluwer’s enterprise cloud reference architecture. This provides a strong foundation for application security, scalability, and service resilience.

The platform is designed to minimise single points of failure and supports rapid failover to disaster recovery facilities. CCH Integrator is engineered to meet 24×7 availability requirements with a target of above 99% uptime.

Microsoft Azure data centres employ layered physical security controls including controlled access, surveillance, environmental safeguards, backup systems, and geographically dispersed regions to meet data residency and compliance needs.

CCH Integrator undergoes rigorous security testing, including automated and manual code reviews aligned to industry standards (such as OWASP), supported by independent penetration testing at least annually.

Data in transit is encrypted using industry-standard protocols. Strong encryption controls protect data at rest within cloud platforms, ensuring confidentiality and integrity across all environments.

Strict access controls follow principles of business justification, least privilege, separation of duties, and formal access reviews to ensure customer data is only accessible when required.

Wolters Kluwer operates a global SOC that provides continuous monitoring, threat detection, and incident response - 24 hours a day, 365 days a year.

A cyber security incident response plan is tested formally, at least annually.

CCH Integrator is supported by a tested Business Continuity Plan and disaster recovery capabilities, including backup and restore processes and enterprise‑wide crisis management procedures.

All employees complete mandatory security and privacy training, with additional role‑based education for developers, architects, and security‑impacting roles. Employees are a critical part of Wolters Kluwer’s security posture.

Wolters Kluwer has a dedicated Corporate Privacy Office reporting to the Executive Board. Privacy considerations are embedded into product design and operational processes across the organisation.

Suppliers undergo financial, security, and privacy risk assessments. Third‑party vulnerabilities are monitored and remediated to ensure continued protection of customer data and services.