Our Committment

1WorldSync has an ongoing commitment to information security at every level. We strive to ensure the security of your data and information across all areas of our organization. The continued attainment of SOC 2 Type 2 Attestation and ISO 27001 demonstrates our commitment and adherence to security best practices across our organization.

SOC 2 ATTESTATION

1WorldSync has obtained SOC 2 Type 2 attestation for the period from July 1, 2023 to June 30, 2024.

A-Lign, an accredited auditory body, has determined that the controls that 1WorldSync has in place over the in scope systems throughout the period from July 1, 2023 to June 30, 2024 provide reasonable assurance that our service commitments and system requirements were achieved based on the trust services criteria relevant to Security, Availability, and Confidentiality (applicable trust services criteria) set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy, in AICPA Trust Services Criteria.

The 1WorldSync-2024-Type 2 SOC 3-Final Report summarizes the system and findings. Further information can be made available upon request.

ISO 27001 CERTIFICATION

ISO 27001 is an information security management system standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It specifies security management best practices and comprehensive security controls following the ISO 27002 best practice guidance. A-Lign conducted the Audit of 1WorldSync in June of 2024.

The 1WorldSync ISO 27001 Certificate covers the second surveillance audit period of our current certification. More information on the audit can be made available upon request.

Who issued the certification and attestation?

1WorldSync’s certification and its attestation report are both issued by A-lign, an independent and accredited certification body based in the United States, on successful completion of formal audit processes.

What 1WorldSync services are in-scope for the certification?

1WorldSync Product Content Management Systems within scope include: Item Management, Product Introduction, Digital Asset, User Management, Communications Hub, Data Sync Direct PIM, Item Integration Gateway, and Product Bundles Services hosted in the Cyxtera Data Centers (CH3 Elk Grove Village, IL and NJ3 Piscataway, NJ) Google Cloud, and AWS data centers.