Is my data secure with PeopleStrong? Trust & Security overview

PeopleStrong maintains a public Trust Vault that documents its security and compliance posture. It holds verified compliance across several frameworks: SOC 2, SOC 1, GDPR, DPDPA, PDPA, ISO 27001:2022, and ISO 13485:2016. These cover information security management, data protection and privacy laws across regions, financial-reporting controls, and quality management.

Beyond certifications, the Trust Vault outlines security controls across many areas, including corporate security (employee training, incident response, mobile device management), endpoint security (DNS filtering, threat detection, disk encryption), access control (password security, data access), network security (firewall, virtual private cloud, data loss prevention), infrastructure (data center, AWS hosting, anti-DDoS), application security (vulnerability and patch management, code analysis, web application firewall), data security (backups, data erasure, physical security), and product security (role-based access control, single sign-on).

Supporting reports and documents (such as SOC reports, vulnerability assessments, and BCP drill reports) are available through the Trust Vault. Access to certain documents may require submitting a request via the portal.

Learn more about each compliance framework:

Learn more about PeopleStrong's security controls:

CERT-In

Corporate security

Endpoint security