Zuletzt aktualisiert: June 2026
We believe that every Tech-Driven SME should start their compliance journey by implementing a rigorous Information Security Management System (ISMS).
At Compleye, we advise our clients to integrate the ISO27001 norm at the core of their compliance processes. An external auditor once referred to the ISO27001 as ‘Your licence to operate’.
We stand by that statement, and we believe that the ISO27001 certification enables immediate trust between you and your customers.
We perform Internal Audits with all our customers and share best practices amongst our customer portfolio.
Without an adequate security system, you can’t protect the privacy of data—that is why privacy follows.
We implemented the ISO27701 (Privacy Information Management System) for one of our SuperCoolCustomers. Every nitty-gritty detail of the GDPR needs to be documented and verified, ensuring every ‘i’ is dotted and every ‘t’ is crossed.
However, we also learned that becoming ISO27701 certified is a huge documentation burden. For companies processing a lot of PII (Personally Identifiable Information) Data, it can be recommended—or even requested—by customers or other stakeholders.
Compleye adopted the privacy-by-design principle.
Once your organization is ready to scale, you can start streamlining your ‘way of working’ and consider implementing a quality framework (e.g., ISO9001).
Implementing a quality system—in general—will increase the amount of documentation and can sometimes slow down scaling and innovation. However, it is not always your choice: external stakeholders can demand such certification.
At Compleye, delivering quality is all about organizing a strong customer-feedback loop. For us, it’s not just about the UX for the customer—we focus on results and feedback from external auditors and regulators. This input directly feeds into our product roadmap.
Compleye works with Audit View in mind—ensuring compliance and continuous improvement.
Compliance is our business, and we closely follow developments in new regulations and industry standards. It is our mission to translate complex laws into practical approaches and measures that are fit-for-purpose and aligned with the stage and phase of your organization.
Compliance with AI regulations is key for all businesses and will need to be embedded in your Compliance Management System.
Compleye supports customers with the implementation of AI within their organization, ensuring alignment with the EU AI Act, ISO42001 and other emerging standards.
Es ist wichtig, Informationen über die Einhaltung von Richtlinien mit den Beteiligten über die von Ihnen implementierten Frameworks zu teilen. Nachstehend finden Sie Informationen zu Sicherheit und Datenschutz sowie Links zu gemeinsamen Dokumenten.
Liste der Unterauftragsverarbeiter:
AWS, Standort EU
- für die Verarbeitung von Compliance-Daten auf unserer Plattform.
Google Analytics
- Analytisches Instrument
Sendgrid
- E-Mail-Benachrichtigung von der Plattform an einzelne Benutzer.
Dokumentation:
Vereinbarung zur Datenverarbeitung
Nutzungsbedingungen
Bedingungen & Konditionen
Auf Anfrage erhältlich
(nur für Kunden)
Security Policy Statement und ISO 27001 - Erklärung zur Anwendbarkeit
