ISAE 3000 – Independent assurance report on security and data protection

Addo Sign is part of twoday, and have obtained an ISAE 3000 report prepared by an independent auditor. This is your assurance that Addo Sign operates within a controlled, secure, and responsible IT environment that complies with international standards for data protection and compliance.

What is ISAE 3000?

ISAE 3000 (International Standard on Assurance Engagements 3000) is an international assurance standard used for independent assessments of non-financial information – such as information security, GDPR compliance, and internal controls. The standard is issued by The International Auditing and Assurance Standards Board (IAASB) and is widely applied in organizations where security, transparency, and accountability are key focus areas.

Purpose of ISAE 3000

The purpose of ISAE 3000 is to provide assurance that an organization has adequate internal controls and processes in place. When a company obtains an assurance report, it means that an independent third party has assessed whether security measures and data processes are accurately described, properly implemented, and – where relevant – functioning effectively. The report is particularly relevant for handling personal data and IT operations.

How is the audit conducted?

The audit is performed by an independent auditor who evaluates the organization’s security and control environment based on defined criteria. The auditor analyzes documentation, performs sample testing, and applies professional skepticism throughout the process. The report documents the auditor’s conclusion on whether the described controls meet the requirements of the ISAE 3000 standard.

What does it mean for Addo Sign’s customers?

Since Addo Sign is part of twoday, it is twoday that has obtained and received the ISAE 3000 report. The report covers key aspects of the technical and organizational operations in which Addo Sign is involved – including data processing, access management, security controls, and GDPR compliance. This provides Addo Sign’s customers with assurance that the solution operates within a professional and secure control environment.

Part of our security efforts

ISAE 3000 is an important element of twoday’s and therefore Addo Sign’s overall approach to security and compliance. It is a documented security measure that contributes to transparency and trust for everyone using our solutions.

References
Download our ISAE 3000 report here