How we approach security and compliance

  • Last update on September 30th, 2024

Security is a top priority for CoreView! This article provides an overview of our approach to security and compliance and important links to detailed documentation, including technical aspects.


Security and compliance

At CoreView, our security and compliance programs are managed by a cross-functional Information Security Steering Committee (ISSC) to ensure we address the security needs of the entire organization. 

We adhere to GDPR regulations and maintain ISO 27001, ISO 9001, ISO 27018, SOC 2 Type II, and SOC 3 certifications. 

Additionally, CoreView is proud to be a Microsoft Preferred Solution & Gold Partner, demonstrating CoreView’s adherence to rigorous Microsoft performance scoring requirements. We conduct annual risk, business impact, and vendor assessments, with quarterly reviews by our risk management team. 

Our approach includes robust authentication, encryption, vulnerability management, rapid patching, continuous monitoring, extensive incident response capabilities and employee training to protect your data. Our commitment is to ensure the highest level of security and compliance for our clients’ Microsoft 365 environments.

For more details, you can visit our security page and legal page.

For details on CoreView’s privacy program, visit our Privacy Policy.


Further reading

If you want to learn more about how CoreView implements security and compliance, you can visit the following articles:

  • Security overview: lists the most important implementations and actions
  • Enterprise applications and data management: details the enterprise apps CoreView uses for onboarding and data import, and elaborates on data import and retention
  • FAQs: addresses the most common questions about how security and compliance are managed in CoreView

Useful resources

CoreView's security page

CoreView's legal page

CoreView's third-party sub-processors