Compliance Standards and Certifications at SpinifexIT

ISO 27001 is an international standard for managing information security. It helps organizations protect sensitive data and manage security risks effectively.

ISO 27701 is a global standard that extends ISO 27001 by introducing additional privacy-specific controls. It helps organizations like SpinifexIT manage personal data securely.

Click the links below to download copies of our ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certificates. 

SOC 2, which is established by the American Institute of Certified Public Accountants (AICPA), evaluates how an organization manages data according to five Trust Services Criteria:

• Security
• Availability
• Processing
• Integrity
• Confidentiality
• Privacy

SOC 2 compliance verifies that SpinifexIT’s data management practices meet rigorous security and privacy criteria, ensuring that client data is processed and stored securely.

Click the link below to download a copy of the Service Organisational Controls (SOC) 2 Type 2 Report.

SpinifexIT has earned certifications for specific products, confirming that our solutions meet established standards for security, privacy, and compliance. These certifications reflect our ongoing commitment to maintaining the integrity and reliability of our products.

• SpinifexIT Easy Suite Products are certified for S/4HANA 2023. For further information, please refer to the details here.
• SpinifexIT has successfully completed the AWS Foundational Technical Review (FTR) for its Strato solution and is now recognized as an AWS Qualified Software. Find more details here.

SpinifexIT has undergone independent audits, validating that the established information security and privacy practices of the organization meet international standards. Earning these certifications demonstrates that SpinifexIT has the right systems, processes, and controls in place to protect customer data, manage risk, and stay compliant with relevant regulations. 

Customers are assured that they have a trustworthy partner in SpinifexIT that is capable of handling data with integrity. Customers can be confident that SpinifexIT's best practices to safeguard personal and sensitive information align with both global and regional privacy standards, as verified by independent assessors.

SpinifexIT achieved its industry certifications by undertaking key actions such as:

• Internal systems and processes assessment and upgrade
• Gap analysis against the standards
• Proper controls and procedures documentation
• External audits by certified assessors
• Compliance and data privacy training sessions  
  

Part of SpinifexIT's commitment to continuous improvement is maintaining certifications by conducting regular internal reviews and risk assessments, continuous employee training and awareness, and undergoing periodic external audits to ensure our practices stay up-to-date with evolving standards.