STANDARDS & COMPLIANCE
Security & Privacy
ISO/IEC 27001:2022
Information security management
Role-based access control, secure authentication, audit logging, and protection of sensitive information
OWASP ASVS 5.0
Application security verification
Protection against common web application vulnerabilities and secure coding practices
RBAC/ NIST model
Role-based access control
Granular user permissions based on organizational roles and responsibilities
GDPR
Data protection principles
Support for privacy, accountability, data retention management, and controlled deletion workflows
ISO/IEC 27701:2025
Privacy information management
A privacy management reference for organizations acting as controllers or processors of personally identifiable information
PCI DSS 4.0.1
Payment account data security
Secure handling and transmission of payment-related information
Records & Content
ISO 15489-1:2016
Records management
Records lifecycle management, retention policies, document versioning, archival, and audit trails
ISO 23081 series
Metadata for records
Structured metadata management, classification, validation, and metadata inheritance
Interoperability
CMIS 1.1
Content interoperability
Standardized management of documents, metadata, permissions, versioning, and interoperability with external systems
OAuth 2.0 + OIDC 1.0
Authorization and identity federation
Secure authentication, identity federation, and Single Sign-On (SSO) capabilities
Quality & Resilience
ISO/IEC 25010:2023
Software product quality
A model for defining and evaluating software characteristics such as suitability, reliability, usability, security and maintainability
WCAG 2.2
Digital accessibility
User-facing experiences can be designed and tested against measurable accessibility criteria
ISO 22301:2019
Business continuity
A continuity reference that helps shape resilience objectives, recovery planning, operational readiness and response to disruption