Information Security & ISO 27001:2022

Our Approach to Information Security

Protecting your customer data and information is our top priority at awork.
We rely on clearly defined processes, responsibilities, and internationally recognized standards to ensure a high and sustained level of security.

ISO 27001 & Information Security Management System (ISMS)

awork is certified according to ISO 27001. You can download our current certificate here.
Our Information Security Management System (ISMS) ensures that information security is implemented systematically, monitored, and continuously improved.

The certification scope covers:

• the awork SaaS platform,
• all internal systems and processes for product development, deployment, and operation,
• all employees involved in these processes.

Responsibilities for Information Security

At awork, responsibility for information security is clearly divided and anchored at the leadership level:

• Our CTO is responsible for technical information security, particularly regarding product, infrastructure, and system architecture.
• Our COO is responsible for organizational and procedural information security, including governance, policies, compliance, and internal processes.
• Security-related decisions are coordinated jointly and reviewed regularly.
• Management is actively involved in further developing the ISMS.

This division ensures that technical and organizational security aspects are considered holistically.

Core Security Principles

• Established ISMS according to ISO 27001
• Regular risk analyses and internal audits
• Clear separation of technical and organizational responsibilities
• Documented processes for handling security incidents
• Continuous review and improvement of security measures

Transparency & Scope

To ensure a high level of security, we do not share detailed technical or architectural information publicly.
We're happy to provide further information as part of individual security reviews or upon request. Just send us an email to security@awork.com. You can also find more information about our ISMS and the opportunity to view our policies at trust.awork.com.