ISO/IEC 27001 certified information security.
Security review happens before the first line of code ships, not after. This is the baseline every ElephantThink engagement runs on.
ElephantThink maintains an Information Security Management System (ISMS) certified to ISO/IEC 27001. The certification covers the people, processes and systems we use to deliver AI, cybersecurity and software engineering projects for our clients.
Our certificate, statement of applicability and the latest surveillance audit report are available on request — see Documentation & disclosure below.
How we apply it
Access control
Least-privilege access to client systems and data, reviewed on a regular cadence.
Risk assessment
Formal risk assessment as part of our ISMS, covering projects and internal operations.
Data handling
Client data is handled under the scope and controls of our ISO 27001 certification.
Security awareness
All staff complete security and data-handling training before working on client engagements.
Incident response
A documented incident response process, tested and reviewed as part of our ISMS.
Secure development
Secure coding and change management practices applied across client delivery.
Documentation & disclosure
Prospective clients and partners can request our certificate, statement of applicability and supporting security documentation as part of due diligence. If you believe you've found a security issue in one of our systems, we want to hear about it.