We've got some news to share.
DatoCMS is officially ISO 27001 certified! This is a big milestone for us, and we’re here to let you in on what it means for us—and more importantly, for you.
So what's ISO 27001?
In simple terms, ISO 27001 is an international standard for managing IT security. Think of it as a rigorous checklist to prove that we’ve got our act together when it comes to protecting your data. It covers everything from how we secure our systems, APIs, and tooling, to how we train one another to keep things secure on an ongoing basis.
In short? It’s our way of saying, "Your data’s safe with us, and we’re not messing around."
We went through this rigorous process as part of our commitment to maintaining the highest levels of data security and protection for our users.
Request the full reportsWhat this means for you
Trusting software with your data is a big deal—whether you're building an enterprise-level site or a personal blog. We've always been very sensitive about this topic, from where we host data (🇪🇺), to what third party processors we use, and so on.
With ISO 27001, we’re not just telling you we’re secure; we’ve had a third-party expert come in and check that everything is rock-solid.
This means:
Better security: We’ve got systems, processes, and guardrails in place to keep your data safe on an ongoing bases.
Peace of mind: You can focus on building awesome projects while we handle the security stuff.
Enterprise-friendly: For those of you working with strict compliance requirements on software choices, this certification checks all the boxes.
Getting certified for this isn't just a pay-to-play “sign a form and call it a day” kind of thing. It was a months-long process involving every part of our team. We evaluated risks, implemented new controls, trained our crew, and put all the pieces in place to meet the rigorous standards, so we're committed to ensuring your content and data have the best possible security.
If you’re curious about what this means or how it impacts you in more detail, feel free to reach out. Alternatively, if you're keen on diving into more details on the technicalities and coverage of this certification, check out the Wiki entry or the official website.