Snapshot 222404
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Trust Center security & privacy,without compromise. Searce is built on a foundation of transparency. Here you'll find everything you need to evaluate our security posture, compliance certifications, and data handling practices. request SOC 2 reportview security controls Compliance Status ISO/IEC 27001:2022 Information Security Management System certified SOC 2 Type 2 Security, Availability & Confidentiality certified PDPL (KSA) Personal Data Protection Law — Saudi Arabia certified DPDP Act (India) Digital Personal Data Protection Act in alignment ISO/IEC 42001 AI Management System in progress 4+ Active Compliance Certifications ISO 27001 · SOC 2 Type 2 · PDPL · DPDP End-to-End Encryption at Rest & in Transit All devices, storage, and network communication 24hr Incident Notification SLA Committed response window for all severity levels Zero Trust Identity & Access Architecture MFA enforced · least privilege · continuous verification report a security vulnerability Discovered a security issue? We take all reports seriously and respond within 24 hours. report now Compliance certifications & audits Our compliance program is independently verified and continuously maintained to meet the highest international standards. ISO/IEC 27001:2022 Searce's Information Security Management System (ISMS) is independently audited and certified by an accredited certification body. Covers all core security domains Annually reviewed via PDCA cycle Certificate available under NDA SOC 2 Type 2 Searce is SOC 2 Type 2 certified, covering Security, Availability, and Confidentiality Trust Services Criteria, independently audited by a licensed CPA firm. Covers Security, Availability & Confidentiality Conducted by independent CPA firm Report available under NDA ISO/IEC 42001 Searce has initiated certification under ISO/IEC 42001, the international standard for AI Management Systems, reflecting our commitment to responsible AI governance. Covers AI risk management & governance Aligned with responsible AI principles Certification in progress PDPL — KSA Searce is certified under Saudi Arabia's Personal Data Protection Law, ensuring compliant handling of personal data for KSA-based operations. Data subject rights supported DPIA conducted for high-risk processing Dedicated Data Privacy Officer in place Security security controls & tools A layered security architecture covering network, endpoint, identity, cloud, and data protection. Tools & Platforms The technology stack powering our security operations. Next-Gen Cloud Firewall Cloud-Native Network Security NGFW · Threat Prevention · Zero Trust Network Access · SASE EDR / XDR / SIEM Endpoint & Threat Detection Endpoint Detection · Threat Intelligence · Log Management MDM Mobile Device Management macOS & Windows MDM · Patch Management · Device Compliance · Identity Management · SSO · Declarative Device Management Collaboration Suite Email · Drive · Video Conferencing Email Security · DLP · Collaboration FIDO2 / Passkeys MFA Enforced — 100% Phishing-Resistant MFA · Passwordless · SSO Full Disk Encryption macOS & Windows Devices Data-at-Rest Protection · All Corporate Devices ITSM IT Service Management Incident Management · Change Management · Asset Tracking · Service Desk Wi-Fi Network Security Cloud-Managed Wireless Centralised Wi-Fi Management · Network Segmentation · Guest Isolation · Cloud Controller Security Controls Policies, processes and configurations that govern how we protect data and systems. Access Control Role-based access control (RBAC), least-privilege enforcement, MFA across all systems, and periodic access reviews with immediate revocation upon exit. Encryption AES-256 encryption at rest across all devices and Google Drive. TLS 1.2+ enforced for all data in transit via Google Workspace. Patch Management Semi-automated patching via MDM platforms for macOS and Windows. Critical patches deployed within 24–48 hours of release. Vulnerability Management Periodic vulnerability scanning, risk-based prioritization, and verified remediation tracked to closure under our ISMS. Secure Development SDLC policy covering secure coding, code reviews, SAST scanning, and strict environment segregation. No production data used in dev or test. Physical Security Access badge controls, CCTV surveillance, visitor management, and zone-based access restrictions across all Searce facilities. Privacy data protection & privacy Searce does not store or process client data independently. All data resides in the client's own environment, and our privacy controls govern how we handle internal and operational data. Data Privacy Officer Searce has a designated Data Privacy Officer (DPO) responsible for overseeing data protection policies, DPIA processes, and regulatory compliance. Data Classification All data is classified across four levels — Public, Internal, Confidential, and Restricted — with handling procedures defined for each tier. Privacy Impact Assessments DPIAs are conducted for all high-risk data processing activities, in alignment with PDPL (KSA) requirements. Data Deletion Controls are in place to fulfill data deletion and erasure requests. Retention schedules are defined and enforced under our Information Security Policy. Policies security & privacy policies Key policies governing Searce's security and privacy practices, reviewed annually by the CISO. Information Security Policy ISMS Master Policy available under NDA Authentication & Password Standard Access Control available under NDA Privacy Policy External Facing public Incident Response Policy Security Operations available under NDA Acceptable Use Policy Employee & Third Party available under NDA Business Continuity & DR Policy Resilience available under NDA AI Governance Policy Emerging Technology available under NDA Vendor & Third-Party Security Policy Supply Chain available under NDA request security documentation Need our ISO certificate, SOC 2 report, penetration test summary, or answers to a security questionnaire? We'll get back to you within one business day. ISO 27001 Certificate Available under NDA SOC 2 Type 2 Report Available under NDA Security Questionnaire Responded within 1 business day contact GRC team mailto:grc@searce.com