A Salesforce Partner since 2014
We’ve been delivering trusted Salesforce solutions for over a decade, recognised as an Expert Partner for Nonprofits. Security and standards have been part of how we work from day one.
Security
We at Cirrico are committed to maintaining an effective Information Security Management System. With one of our core values being Trust, we aim to ensure that we are continually improving our approach in this area. We do this by methodically analysing any risks to the organisation’s information security and have put in place policies and procedures to manage any threats to our data and assets. As part of this, we have implemented the ISO/IEC 27001:2022 standard which provides us and our customers with assurance, knowing that our daily working processes and controls are in line with industry best practices and secure.
ISO/IEC 27001:2022
What is ISO?
ISO is the International Organization for Standardization and was created to help businesses manage risks effectively in a way which could be internationally replicated and reviewed. ISO/IEC 27001:2022 is centred around managing information security and is part of a group of management standards offered by the International Organization for Standardization. These standards are all verified by an independent Certification Body and are only awarded once an organisation can show that they meet all requirements outlined.
Cirrico was awarded the ISO/IEC 27001:2022 standard in June 2017 by the British Assessment Bureau, who are accredited by UKAS, the only Accreditation Body appointed by Government. This accreditation ensures that we are looking after essential data on a daily basis and are continually managing any security risks that may present themselves by being proactive, not reactive.
What are the advantages of gaining certification?
With the ISO/IEC 27001:2022 certification we are able to show conclusively that we are always focused on keeping our and our customer’s information secure. The risk for potential data security breaches is minimised by adhering to this standard as well. Data breaches are a much discussed topic and there have been many high profile cases of data mismanagement. With our certification, we are able to demonstrate our operational excellence in this area as we work consistently to best practices and in accordance with UK and EU legislation including General Data Protection Regulations (GDPR).
Certifications
ISO/IEC 27001:2022 - certified by the British Assessment Bureau, certificate number 253972
Certified since November 2023, with annual assessments. Scope: the provision of cloud based technology services, consultancy and software development services for the Salesforce platform.
National Health Service Data Security and Protection Toolkit
We have met the standards set out by the Data Security and Protection Toolkit. Our organisation reference is 8KM08, you can view the publication here. This framework ensures we are able to work with organisations that work with the National Health Service and demonstrates our commitment to security.
Responsible artificial intelligence
Artificial intelligence is changing how charities work, and we help organisations adopt it responsibly - adoption grounded in clean data, strong governance and the security the sector demands. Read our position on artificial intelligence.
Data protection and privacy
Read our Privacy Policy to see how we look after personal data.
Policies
Our statement sets out the steps we have taken in 2023 to ensure that there is no slavery or human trafficking in our business or in our supply chains, including ensuring all suppliers agree to comply with Modern Slavery legislation. Read our statement here.
CirriCommit is our commitment to being a responsible business.