Information security, documented and kept current.
ISO 27001 support is in preparation, from scoping to certification readiness. Below it, what protects your compliance data in Marsstein today.
In preparationISO/IEC 27001:2022
From scope to certification readiness.
ISO/IEC 27001:2022 and ISO/IEC 27002:2022, cited by clause and control number; the standards themselves are not reproduced. The content is a draft, for review by a responsible person.
- 01Scoping
- 02Risk treatment
- 03Statement of Applicability
- 04Internal audit
- 05Management review
- 06Certification readiness
What the agents work with.
The ISMS playbook
The method for an information security management system, from scope to review.
A drafting method
How each document is drafted and reviewed, with a skeleton for it.
Questionnaire packs
The questions an ISMS asks, with overlays for single sectors.
Routines that end with you
Each routine ends at a human approval.
How we protect your compliance data.
Your compliance data is sensitive. Here is what protects it, as our privacy policy states it.
Technical and organisational measures (Art. 32 GDPR).
Encrypted in transit and at rest
TLS 1.3 between your browser and Marsstein Compliance, AES-256 for stored data.
Tenant isolation
Each customer organisation is strictly separated from every other.
Role-based access
Fine-grained permissions decide who sees and changes what.
Tamper-proof audit log
Hash-chained logs record what happened, and by whom.
Separate databases
Authentication, documents and the AI agent each keep their own database.
Security audits
The security of Marsstein Compliance is audited regularly.
Your data does not train the model.
The AI features use the Google Gemini API. Data is sent to it only to provide those features, and Google does not use data submitted through the API to train its models.
Read the privacy policy