Data security qualifications and compliance

We take information security seriously.

As a data company, we understand the importance of keeping your data secure. Customology is ISO 27001 certified to reassure you that your data and information is protected. This is the international standard that specifies the requirements for implementing, maintaining and continually improving an information security management system.

Contact our security team How we protect your data
ISO/IEC 27001:2022 information security certified

ISO/IEC 27001:2022
Information Security Management System

Achieving ISO 27001

What certification means for you.

We take all reasonable steps to protect the confidentiality, integrity and availability of the data and information we hold.

  • Best practiceShows Customology takes a 'best practice' approach to data security management.
  • TrustedIndicates Customology can be trusted to manage its risks and security.
  • AccountableFor our clients, stakeholders and employees, shows that we take security seriously and make every effort to protect data and information.

Protecting your data

A robust security management program.

We have always made security a priority when it comes to data, and gaining ISO certification adds to the many measures we've implemented, which includes encryption, monitoring and surveillance, and regular security audits to identify and manage threats.

Customology achieved and maintains certification by developing and implementing a robust security management program, including a comprehensive Information Security Management System (ISMS). This is the basis of the framework for all procedures and policies addressing information security throughout our organisation.

We are committed to information security, our ISO certification is not a 'set and forget' or a 'one-time effort'. The security of data is an ongoing priority for us, and the formal certification requires regular internal checks as well as formal external audits every year.

Our ISMS covers

Integrating, storing, analysing and segmenting contact, activity, and transactional data of sensitive customer information in accordance with our business objectives by:

  1. Communicating, developing, and implementing objectives, policies and processes to ensure confidentiality, integrity and availability of all critical information data and information processing facilities
  2. Complying with statutory and regulatory requirements, contractual security obligations, and other applicable requirements
  3. Maintaining appropriate systems to ensure integrity and protection against unauthorised alteration or destruction
  4. Managing security incidents effectively by establishing security incident response plans
  5. Implementing controls for identified risks, threats and vulnerabilities
  6. Establishing, implementing and testing of business continuity plans; and
  7. Continually improving the ISMS

Safe, governed data and AI

Governed data and AI, Australian built and hosted.

Your data is consolidated, governed and processed in one platform, with access controls, lineage and audit trails, and operated through Customology's ISO/IEC 27001:2022 information security framework.

We only collect as much data as is required to provide our services. We do not share or disclose data to non-authorised parties, and we only use (process) customer data in accordance with our agreed scope of services.

  • GovernedAccess controls, lineage and audit trails
  • EncryptedEncryption, monitoring and surveillance
  • AuditedRegular internal checks and formal external audits every year
  • ResilientTested business continuity and incident response plans

Privacy Act & GDPR

Handled under the Australian Privacy Principles.

Customology handles, uses, and manages data in accordance with the Australian Privacy Principles (APPs) and the General Data Protection Regulation (GDPR), including the Notifiable Data Breach schemes. We work closely with all parties to ensure they understand their responsibilities with respect to privacy and information security.

We only collect as much data as is required to provide our services in an efficient and effective manner. We do not share data or disclose data to non-authorised parties. We only use (process) customer data in accordance with our agreed scope of services.

Government online safety precautions

Stay safe online

Company details

Customology Pty Ltd

ACN
611 188 393
ABN
58 611 188 393
Head office
61 Southgate Ave, Cannon Hill QLD 4170, Australia
Mailing address
PO Box 2456, Mansfield QLD 4122, Australia
Group
Customology is a division of the GJI Group, www.gjigroup.com.au

Security questions?

Speak to our security and compliance team.

We're happy to walk your security, legal or procurement team through our controls and complete your vendor assessment.

Contact us