WebTrust
for Certification Authorities
An independent audit programme that assesses how Certification Authorities issue, manage, and revoke Digital Certificates.
Trust That Goes Beyond Our Word
Trust should be backed by more than promises. See how Privy protects identity and signature infrastructure through independent audits, responsible data practices, and transparency.
Independently Audited, Externally Verified
The standards here are backed by external audits and certification bodies that independently examine our controls and validate the results.
ISO/IEC 27001:2022
certified by TÜV Rheinland
The international standard for information security management. It covers how security risks are identified, managed, and continuously reviewed.
iBeta Level 2
presentation attack detection · ISO/IEC 30107-3
An independent laboratory testing that tests liveness detection against spoofing attempts, such as photos, masks, and video replays, in accordance with ISO/IEC 30107-3 Level 2.
ISO/IEC 27701
certified by BSI
An international standard for managing privacy risks and protecting personal information throughout its lifecycle.
The Proof Behind Your Trust
Your Trust Deserves More Than Words
Your digital interactions deserve more than security claims. Discover the standards, safeguards, and governance behind Privy’s digital trust platform.
Certificate Warranty up to US$170K*
*Rounded regional amount. Terms and conditions apply. Available to eligible verified users.
Security
Security at Privy follows defined controls, clear responsibilities, and regular reviews, supported by our ISO/IEC 27001:2022 certification.
Manage Security Risks Systematically
Security risks are identified, assigned to responsible owners, addressed through defined controls, and reviewed regularly.
Encrypt Data at Every Stage
Identity data and documents are protected with encryption during transmission and storage.
Restrict Access to Customer Data
Access to customer data is limited to authorised roles based on business needs, and access activity is recorded for accountability.
Governance
Privy operates as a Certificate Authority with certificate issuance, management, and revocation independently audited under the WebTrust programme.
Validate Certificate Operations
The processes behind Privy’s certificate lifecycle are independently examined against WebTrust requirements.
Record Certificate Decisions
Each decision has a traceable record showing what was done and who had the authority to approve it.
Control Infrastructure Changes
Infrastructure updates that may affect trust decisions follow a defined review and approval process before they are implemented.
Privacy
Personal information requires careful protection throughout its lifecycle. Privy’s approach to privacy information management is certified to ISO/IEC 27701.
Process Data for a Clear Purpose
Personal information is only used for the purpose explained when it is collected.
Set Your Data Retention
Organisations can configure how long data is retained to align with their own policies and requirements.
Give Individuals Control
Privy Digital Identity lets individuals decide which identity attributes they share with connected platforms for each interaction.
Auditability
Every verification and signature creates a lasting record, so important actions and decisions can be reviewed when needed.
Track Every Action
Each record shows what happened, when it happened, and who was responsible. It provides you a clear history when questions arise.
Review the Evidence
Verification results include the checks behind the decision. This gives reviewers the information they need to understand the outcome.
Retrieve Records When Needed
Records are available for internal reviews, audits, or dispute resolution whenever they are required.
Bring Privy to Your Security Team
Need specific security or compliance documents? Tell us what your team is looking for. We’ll point you to the right information.