Trust Center

Trust, backed by evidence

At Witivio, trust is our #1 value, and we believe it cannot be earned without full transparency. Whether you are running a security review, filling out a vendor risk questionnaire, or deciding if Witivio is right for your organization, this Trust Center gives you clear, verifiable answers. Security through obscurity is a weak control, so we document how our services work in the open.

ISO/IEC 27001:2022 certified Built on Microsoft Azure Encrypted by default

What this Trust Center covers

Everything a security, IT, or procurement team needs to evaluate Witivio, in one place.

Security policyHow we govern security across people, processes, and technology.Read more Secure developmentHow security is built into our engineering and release process.Read more Communication and network securityEncryption in transit, network flows, and DDoS protection.Read more Data management practicesHow your data is stored, protected, retained, and deleted.Read more Privacy and complianceOur privacy principles, hosting regions, and data residency.Read more Authentication and single sign-onMicrosoft Entra ID sign-in and identity.Read more Microsoft Graph permissionsThe least-privilege permissions we request, and why.Read more Infrastructure and servicesThe Microsoft Azure foundation our services run on.Read more Classification labelsHow we classify and handle information.Read more Supported clientsThe platforms and clients we support.Read more

How we protect your organization

Independently certifiedWitivio's Information Security Management System is certified to ISO/IEC 27001:2022 by an accredited third-party auditor.

Built on Microsoft AzureOur services run on Microsoft Azure, whose data centers are independently audited against SOC 1, SOC 2, HIPAA, and FedRAMP.

Native to Microsoft 365Sign-in uses Microsoft Entra ID single sign-on, with the least Microsoft Graph permissions needed for each feature.

Encrypted by defaultAll traffic uses HTTPS with TLS 1.2 or higher, and your data is encrypted at rest.

You own your dataWe use customer data only to deliver the services you agreed to, and it is removed when you leave.

Transparent by designOur policies, controls, and audit evidence are published so you can verify them yourself.

Independently certified to ISO/IEC 27001:2022

Witivio's Information Security Management System (ISMS) is certified against ISO/IEC 27001:2022, the leading international standard for information security. The certification is issued by an accredited third-party auditor and covers the people, processes, and technology behind every Witivio service.

For IT admins, CISOs, and security reviewers evaluating Witivio, the full list of Annex A controls, audit reports, and supporting policies is available on our public trust portal: trust.witivio.com.

Working through a security review?

Audit reports, our ISO/IEC 27001:2022 certificate, a completed security questionnaire, and our Data Processing Agreement are all available on our public trust portal. If you cannot find what you need, reach out and our team will help you complete your assessment.

Visit trust.witivio.com