The RapidRatings information security compliance programs help our clients and members understand the comprehensive controls in place to maintain the security of their data. Compliance certifications are assessed by a third-party, independent auditor and result in a certification, audit report, or attestation of compliance.
ISO 27001 is the international standard for managing risks related to the security of information and data your organization holds. The standard ensures that customer and employee data is stored securely and complies with legal requirements such as GDPR. It adopts a process-based approach for establishing, implementing, operating, monitoring, maintaining, and improving the information security management system (ISMS).
RapidRatings undergoes independent audit to this standard twice per year, with a full recertification audit every three years.
A SOC 2 examination is a report on controls at a service organization relevant to security, availability, processing integrity, confidentiality, or privacy. The examination delivers two reports:
This attestation by an independent auditor is a report of the quality of design of the information security controls in place at RapidRatings.
This attestation by an independent auditor is a report of the effectiveness of operation of the information security controls in place at RapidRatings. RapidRatings engages our third party auditors to carry out this examination and prepare this report once per year.
RapidRatings is fully committed to compliance with the GDPR. We operate a risk-based approach to GDPR and data protection by evaluating risks to the confidentiality, integrity and availability of our client’s data.
