Enpass is a globally trusted password manager that puts data sovereignty first, with no need for self-hosting. Our unique zero-knowledge, zero-possession architecture ensures your password vaults always remain in your environment and never on Enpass servers. Backed by globally recognized certifications, our security posture reflects how we manage risks, ensure secure development and follow industry best practices.
Here are the compliance frameworks that Enpass Technologies Inc. follows which showcases our adherence to industry-standard security guidelines and practices.
ISO 27001
Compliant
A globally recognized standard for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).
SOC 2
Compliant
SOC 2 is a voluntary compliance standard for service organizations, developed by the American Institute of CPAs (AICPA), which specifies how organizations should manage customer data. The standard is based on the following Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.
ISO 27701
Compliant
ISO 27701 is an extension of ISO 27001 and ISO 27002 for privacy information management. It helps organizations comply with global privacy regulations by providing a framework for managing personal data.
GDPR
Compliant
The General Data Protection Regulation, a comprehensive data protection law in the EU, governs how organizations must protect personal data and privacy.
TISAX
Compliant
Trusted Information Security Assessment Exchange (TISAX) is a security standard for the automotive industry. It ensures that organizations comply with industry-specific data security requirements.