ISO/IEC 27001

The ISO/IEC 27001 certification is an international benchmark for Information Security Management Systems (ISMS). Zilliz Cloud's adherence to this standard demonstrates our systematic approach to managing sensitive data in alignment with global best practices. This certification provides additional assurance that your information assets are well-protected.

FAQs

What is ISO/IEC 27001?
ISO/IEC 27001 is a globally accepted standard published by the International Organization for Standardization (ISO). It outlines best practices for establishing, implementing, maintaining, and continually improving an information security management system to protect data confidentiality, integrity, and availability.
Where can I access Zilliz’s ISO 27001 certification?
The ISO/IEC 27001:2022 certificate for Zilliz is available here.
Is Zilliz Cloud ISO/IEC 27001 certified?
Yes. Zilliz Cloud is certified to ISO/IEC 27001:2022, the internationally recognized standard for Information Security Management Systems (ISMS). This demonstrates that Zilliz has implemented and maintains a systematic approach to managing sensitive information and ensuring data security.
What is the scope of Zilliz’s ISO 27001 certification?
The certification covers:
- Design, deployment, and operation of Zilliz Cloud infrastructure;
- Data storage, encryption, and access controls;
- Employee security policies, training, and internal processes;
- Risk management, third-party vendor oversight, and incident response.
Who conducted the ISO 27001 audit?
Zilliz’s ISO/IEC 27001 certification was audited by BSI (British Standards Institution), a globally recognized certification body. The certificate was issued under the NAAB (National Accreditation Authority of Britain) accreditation, ensuring international credibility and adherence to rigorous audit standards.
How often is the certification reviewed?
The certification is subject to annual surveillance audits and a full recertification audit every three years, ensuring our ISMS remains effective and up-to-date with evolving threats and business needs.
How does ISO 27001 relate to other compliance frameworks?
ISO 27001 provides the foundational structure for many other security and privacy frameworks, including SOC 2, ISO 27701, GDPR, and HIPAA. Zilliz aligns its daily operations with ISO 27001 to support and reinforce its broader compliance objectives.