We have established organizational and technical controls to ensure that we adhere to our compliance commitments.
Privacy, Security & Reliability
Information security and privacy are core values for Earnix. We are intent on ensuring our security program remains on the cutting edge and continues to lead the industry.
Compliance, Certificates and Audits
We have established organizational and technical controls to ensure that we adhere to our current compliance commitments
Earnix is certified with the ISO/IEC standard 27001 Information Security Management Systems
Earnix is certified with the ISO/IEC standard 27701 Extension to ISO 27701 and ISO 27002 for privacy information management
Earnix is certified with the ISO/IEC standard 27017 Code of practice for information security controls based on ISO/IEC 27002 for cloud services
Earnix is certified with the ISO/IEC standard 27018 Code of practice which focuses on the protection of personal data in public clouds
Earnix is certified with the ISO/IEC standard 22301 Security and resilience - Business Continuity Management systems (BCM)
Earnix participates in the voluntary Cloud Security Alliance (CSA) Security, Trust & Assurance Registry (STAR) Self-Assessment to document its compliance with CSA-published best practices. Earnix publishes its completed CSA Consensus Assessments Initiative Questionnaire (CAIQ) on the CSA website.
FSQS (Financial Services Qualification System) is a community of financial institutions including banks, building societies, insurance companies and investment services, collaborating to agree a single standard for managing the increasing complexity of third and fourth-party information needed to demonstrate compliance to regulators, policies and governance controls.
The Earnix solution is hosted on top of the Amazon Web Services (AWS) infrastructure. AWS compliance meets a broad set of international and industry-specific compliance standards, as well as country-specific standards. Rigorous third-party audits verify AWS’s adherence to standards-mandated security controls.