Benivo Achieves ISO/IEC 27001:2022 Re-Certification and SOC 2 Type II Attestation

Protecting our clients' and their employees' data is fundamental to how Benivo operates.

Benivo has successfully completed its full ISO/IEC 27001:2022 re-certification and SOC 2 Type II examination, providing independent validation of the security controls, processes and governance that protect the Benivo platform and our clients' data.

ISO/IEC 27001:2022 Certified

ISO/IEC 27001:2022 is one of the world's most widely recognised information security standards. It defines requirements for establishing, operating and continuously improving an Information Security Management System (ISMS).

Benivo's ISMS has been independently audited and certified against the ISO/IEC 27001:2022 standard.

The re-certification reflects our continued investment in the people, processes and technology required to manage information security risks and protect client and employee data.

 ISO/IEC 27001:2022 re-certification cycle.

SOC 2 Type II

Benivo has also successfully completed a SOC 2 Type II examination, providing further independent assurance over the design and operating effectiveness of our controls over an extended period.

SOC 2 is particularly relevant to enterprise SaaS customers evaluating how technology providers protect and manage sensitive information. The Type II assessment provides evidence that the controls assessed were not only designed appropriately, but operated effectively throughout the review period.

Enterprise-Grade Security

Our information security programme includes controls across areas such as:

• access management and role-based permissions;
• encryption of data in transit and at rest;
• vulnerability management and independent penetration testing;
• security monitoring and incident management;
• third-party security and privacy risk management;
• business continuity and disaster recovery;
• employee security and privacy training; and
• ongoing risk assessment and control monitoring.

Security is an ongoing programme, not a one-time exercise. Benivo continually reviews and strengthens its controls as our platform, services, threats and regulatory requirements evolve.

Independent Assurance for Our Clients

ISO/IEC 27001:2022 certification and SOC 2 Type II provide our clients with independent assurance that Benivo maintains a mature and continuously managed information security framework.

Combined with our data protection programme and compliance with applicable privacy requirements, these independent assessments support the trust that global organisations place in Benivo to manage sensitive employee mobility and relocation data.