TeamMate Privacy and Security Certifications

Conformity with ISO/IEC 27001 means that an organization has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.

SOC 2 certification is a cybersecurity compliance framework that ensures third-party service providers store and process client data securely. The framework specifies criteria based on five trust service principles: security, privacy, availability, confidentiality, and processing integrity.

We follow the question catalogue of information security of the German Association of the Automotive Industry (VDA ISA). The assessment result is exclusively retrievable over the ENX Portal.

The Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules protect the privacy and security of health information and give patients rights to their health information. HIPAA establishes standards to safeguard the protected health information (PHI) of individuals.

The Security, Trust, Assurance, and Risk (STAR) Registry is a public database that records the security and privacy controls of cloud service providers. It promotes transparency and standardization by aligning with the Cloud Controls Matrix and documenting compliance with industry regulations and frameworks.

Adherence to GDPR as part of the Wolters Kluwer privacy program.

Adherence to CCPA as part of Wolters Kluwer privacy program.

The [U.S.] Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that promotes the adoption of secure cloud services across the federal government by providing a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.

GovRAMP’s governance committees adopt policies and procedures that standardize security requirements for providers. GovRAMP’s Program Management Office then verifies those cloud offerings utilized by government satisfy adopted security requirements through independent audits and continuous monitoring.