> For the complete documentation index, see [llms.txt](https://docs.glesys.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.glesys.com/security/information-security-and-compliance/compliance-and-certifications.md).

# Compliance & certifications

Glesys maintains its security program in accordance with recognized standards and regulatory requirements. The program is built on the following frameworks:

## ISO/IEC 27001

Glesys is certified under ISO/IEC 27001, which guides security controls, policies, and management practices. The Integrated Management System (IMS) is aligned with this standard and undergoes regular audits.

## GDPR

Personal data is managed in compliance with the General Data Protection Regulation (EU 2016/679), with privacy incorporated into systems by design and by default.

## Additional regulatory alignment

Glesys also monitors and aligns with:

* DORA (Digital Operational Resilience Act), applicable to financial and ICT service providers
* Other evolving standards and national requirements, such as NIS2 where relevant

Security practices are continuously adjusted to reflect changing requirements and conditions.