As an essential data processor for insurers, our top priority is the security and privacy of the data we are entrusted to protect. We are committed to providing solutions that comply with all regulatory and data security requirements. You get a robust, user-friendly solution that never compromises on security.

Your data is safe with us.

Our approach to compliance

Our approach is built around ISO 27005 and its risk assessment process, where our people, processes and technology are continuously prioritized and hardened based on the risk they pose.

#1

Penetration tests. External cyber professionals regularly conduct penetration tests on Scalepoint’s networks and solutions. They analyse vulnerabilities related to the most critical attacks that occur at a specific time. Test results can be shared if requested.

#2

ISAE 3402 and 3000. We prepare 3402 ISAE and ISAE 3000 audit reports through an independent audit firm. The reports provide security for the design, implementation, and administration of our internal controls regarding data security and privacy.

#3

Incident response 24/7. Our Incident Response Team monitors potential cyber security breaches 24/7. The team handles technical incidents as well as incidents where privacy legislation dictates that specific steps must be taken.

#4

Employee training. All Scalepoint employees are continuously trained in data security and GDPR. Relevant functional areas also receive training in performing their controls correctly and designing solutions in a safe and GDPR-compliant manner.

ISO 27001 and 2

To ensure that appropriate controls are in place to manage current and future risks, we have implemented an Information Security Management System in accordance with ISO / IEC 27001. The controls are continuously audited by our internal second line of defence functions as well as external auditors.

Dedicated Risk &
Compliance team

We have established clear lines of defence that meet industry requirements. We continuously train and certify our employees in all areas of defence. Our certifications include: