Trust Services Criteria Report
SOC 2 is an AICPA framework for how service providers protect customer data. An independent CPA firm examines controls against the Trust Services Criteria. A Type II report covers a set period and is an examination report, not a certificate.
General Data Protection Regulation
GDPR is the European Union regulation on the protection of personal data. It applies to organizations that handle the data of people in the EU. It sets rules on lawful use, individual rights and breach reporting. As a law, it has no general certificate.
Digital Personal Data Protection Act
The Digital Personal Data Protection Act, 2023 is India's law on processing digital personal data. It sets duties for organizations (data fiduciaries), consent and notice rules, and rights for individuals (data principals). Serious breaches can lead to penalties. It is a law, so there is no general certificate.
Information Security Management
ISO/IEC 27001 is the leading standard for an information security management system (ISMS). It protects the confidentiality, integrity and availability of information through risk-based controls. Regular audits keep it effective and build customer trust.
Quality Management System
ISO 9001 is the best-known standard for quality management systems. It helps an organization meet customer and legal requirements through clear processes and measurable objectives. Regular audits drive continual improvement in businesses of any size.
AI Management System
ISO/IEC 42001 is the first international standard for an AI management system. It helps organizations develop, provide or use AI responsibly. It covers risk, transparency, accountability and data quality.
Privacy Information Management
ISO/IEC 27701 covers a privacy information management system (PIMS). It helps organizations manage personal data with accountable privacy practices. It works alongside ISO/IEC 27001 and supports compliance with privacy laws.
IT Service Management
ISO/IEC 20000-1 is the standard for an IT service management system. It helps IT providers plan, deliver and improve services consistently. It covers incident, change and service level management.
Business Continuity Management
ISO 22301 sets requirements for a business continuity management system. It helps organizations prepare for, respond to and recover from disruptions such as outages and cyber incidents. Impact analysis, recovery plans and testing are central.
Market, Opinion and Social Research
ISO 20252 sets requirements for market, opinion and social research, including insights and data analytics. It covers how studies are planned, run, analyzed and reported. It helps research providers show consistent quality and reliable results to their clients.