Compliance frameworks followed by CoffeeBean Technology's Trust Center

CoffeeBean Technology® is a California based company with key operations in Brazil and Germany, recognized as a leader in KuppingerCole's reports for IGA and CIAM.

As a global IAM provider, we understand that the confidentiality, integrity, and availability of identity data are fundamental to the security and compliance posture of our customers worldwide.

Security is not an afterthought at CoffeeBean. It is embedded in how we design, build, and operate our platform. We are committed to providing clear and transparent information about our security practices, controls, and responsibilities, so that organizations across industries and geographies can confidently trust us as their IAM partner.

This Trust Center offers a high-level view of how CoffeeBean identifies and mitigates risks, applies security best practices, and continuously evolves to meet the demands of a modern threat landscape.

Compliances (8)

Here are the compliance frameworks that CoffeeBean Technology follows which showcases our adherence to industry-standard security guidelines and practices.

SOC 2

Certified

SOC 2 is a voluntary compliance standard for service organizations, developed by the American Institute of CPAs (AICPA), which specifies how organizations should manage customer data. The standard is based on the following Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.

ISO 27001 v2022

Certified

The updated version of the ISO 27001 standard, reflecting the latest best practices and improvements in information security management.

ISO 27017

Compliant

ISO 27017 is a standard providing guidelines for information security controls applicable to the provision and use of cloud services. It helps organizations ensure secure cloud services by implementing these best practices.

ISO 27018

Compliant

ISO 27018 is a standard focusing on protecting personal data in the cloud. It sets out guidelines to ensure cloud service providers implement robust privacy and data security measures.

Swiss-U.S. Data Privacy Framework

Compliant

Compliant with SWISSUSDATAPRIVACYFRAMEWORK requirements

PCI DSS

Compliant

Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment.

GDPR

Compliant

The General Data Protection Regulation, a comprehensive data protection law in the EU, governs how organizations must protect personal data and privacy.

Brazil LGPD

Compliant

Create your own Trust Center | Powered by