Reporting.cz achieves ISO 27001 certification

Our application is used by companies that work with sensitive business and financial data. Protecting that data requires not only the right technology but also clearly defined rules, processes and responsibilities. For us, ISO/IEC 27001 certification means independent verification that our information security management system meets the requirements of this standard.

ISO/IEC 27001 in practice

ISO/IEC 27001 is the international standard for information security management. It sets out requirements for systematically identifying and assessing security risks, implementing appropriate controls, and continually improving the security management system.

At Reporting.cz, we have established processes for managing access to data and systems, defining responsibilities, assessing security risks and handling any incidents. We regularly review how they work, and our security management system is subject to independent audits. Information security is therefore part of the everyday operations of the entire company.
— Michal Rozehnal, CEO of Reporting.cz

What the certification means for our customers

For customers, the certification provides independent confirmation that we protect information in line with an internationally recognised standard.

It also makes it easier to assess Reporting.cz as a supplier. Companies with their own security requirements, or those that regularly audit their suppliers, can use the certification as one of the inputs in their evaluation.