Control D Is ISO 27001 and ISO 27701 Certified

We have some news. Control D has achieved certification under ISO/IEC 27001:2022 and ISO/IEC 27701:2019, and we're genuinely proud of it.

Not because certifications are fun to obtain (they aren't), but because of what they represent. 

This follows our SOC 2 Type II compliance from last year, and together, it means that every dimension of how we manage security and privacy has been independently examined and verified by accredited third-party auditors.

Here's what that actually means in practice.

For Our Users

You already trust Control D to manage your DNS. These certifications are proof that your trust is well placed.

• Your data is handled responsibly. ISO 27701 holds us accountable for privacy at an organizational level, not just at the product level. The way we collect, process, and protect personal data has been independently verified against one of the world's most rigorous privacy frameworks.
• The platform you rely on is secure by design. ISO 27001 means our security program covers people, processes, and technology, and is subject to ongoing audits. It doesn't get rubber-stamped once and forgotten.
• You don't have to take our word for it. That's the whole point. Independent certification exists, so you don't have to.

For Organizations Evaluating Control D

If you're a business, school, or enterprise doing due diligence on Control D as a vendor, this simplifies things considerably.

• ISO 27001 and ISO 27701 are globally recognized. Whatever region you operate in, these certifications are understood and respected by procurement and compliance teams worldwide.
• Combined with SOC 2 Type II, the picture is complete. SOC 2 covers operational controls in the North American context. ISO 27001 covers the security management system behind those controls internationally. ISO 27701 covers privacy. Between the three, there isn't an angle that hasn't been independently examined.
• Less back and forth during vendor reviews. Instead of working through lengthy security questionnaires, we can point to certifications that answer most of those questions already.

What Comes Next

These certifications require ongoing surveillance audits, so maintaining them is an active commitment. We'll keep investing in our security and privacy program as Control D grows, because the bar we've set for ourselves doesn't move.

None of this happens without a great team, and none of it matters without the trust of our users and partners. Thank you both.