27001
ISO/IEC 27001:2022
Information security management system
Rs 7,000 Rs 12,000
Non IAF CertificationFinal price. No GST charged.IAF option: Rs 18,500View certificationPROTECTION OF PERSONAL DATA IN PUBLIC CLOUD
ISO/IEC 27018:2025 alignment review
Protection of personal data in public cloud. Typically about 5 working days after complete documents, payment and review.
ISO/IEC 27018:2025 provides cloud privacy guidelines. This service reviews alignment with those guidelines; it is not a standalone accredited ISO management system certification.
What is ISO/IEC 27018:2025?
ISO/IEC 27018 is a code of practice for cloud providers that process personal data on behalf of customers. It adds privacy controls to an ISO 27001 system, covering consent, transparency, sub-processors and the return or deletion of data.
Who needs it?
- SaaS and cloud platform providers
- Hosting and managed cloud companies
- Data processing vendors
- Companies holding ISO 27001 and handling customer personal data
Review the ISO/IEC 27018:2025 preparation checklist
What it can do for your business
- Answers privacy questions in cloud contracts
- Stronger customer trust
- Supports data protection compliance
- Extends an existing ISO 27001 system
FROM ENQUIRY TO REVIEW
How it works
01
Define the support needed
Describe your activities, the relevant product or service and the question the review should address.
02
Confirm scope and fees
Agree the service deliverable and its limitations, buyer requirements and any additional costs before payment.
03
Gather current records
Prepare your initial business documents and evidence for the service-specific checklist below.
04
Complete the review
Respond to requests for missing information and review any identified gaps or next steps.
05
Check the deliverable
Confirm what the resulting record demonstrates. Refer to the service disclosure above for limits on certification, registration or approval claims.
STARTING YOUR APPLICATION
Initial business documents
These establish who is applying and the proposed business scope. They are the starting point; the service-specific review or assessment can require additional operational evidence.
Business registration
Udyam, incorporation certificate or shop licence.
Letterhead or visiting card
Your business name and contact details.
One business invoice
A recent sales or purchase invoice.
Your business scope
What you do, in one or two clear lines.
Prepare for ISO/IEC 27018:2025
Use these protection of personal data in public cloud checks to organise your preparation. For each item, identify the responsible person, the procedure used and a recent record showing what happens in practice.
- Process personal data only on the customer's instructions
- No use of customer data for advertising without consent
- Disclose sub-processors and data locations
- Notify customers of personal data breaches
- Return, transfer or delete data at the end of the contract
Make your evidence match your scope
- Describe the actual activities and locations to be reviewed, including outsourced work and responsibilities retained by your business.
- Choose current examples from your own operation. Record the date, responsible person and outcome so the reviewer can connect the evidence to your stated scope.
- Identify missing records or unfinished actions before assessment. A policy or blank template alone does not show how a process operates.
- Ask which records apply to your selected service and scope. This preparation checklist is not an exhaustive assessment or a promise of certification.
ISO/IEC 27018:2025 provides cloud privacy guidelines. This service reviews alignment with those guidelines; it is not a standalone accredited ISO management system certification.
BEFORE YOU COMMIT
Confirm these details in writing before payment
Use the published price alongside the agreed scope and service terms when deciding whether the offering meets your requirement.
- Scope and deliverable: the applicable standard or scheme, edition, activities, sites and exclusions, and exactly what document or support the service provides.
- Issuing or assessment body: its name and role. If accredited certification is required, confirm the accreditation body and that the relevant standard and scope are covered.
- Buyer acceptance: share the actual tender or customer clause and confirm that the proposed route meets it. A certificate title alone does not establish acceptance.
- Assessment arrangements: required documents, audit or review stages, remote or on-site work, travel, readiness requirements and expected timing.
- Fees and exclusions: the selected service price, what is included, and any separate implementation, testing, site visit, travel or statutory registration costs.
- Ongoing obligations: applicable surveillance, renewal or reassessment, their fees, and how changes to your activities or locations should be reported.
Certification and accreditation have different roles. See ISO's guidance on choosing a certification body.
Questions about ISO/IEC 27018:2025
01Do we need ISO 27001 first?+
ISO/IEC 27018 is designed to be used with ISO 27001, so most providers implement both together.
02Does it apply to on-premise software?+
No. It is written for public cloud services that process personal data as a processor.
03Is it a law?+
No. It is a voluntary code of practice that supports compliance with privacy law.
A stronger system, together.
Explore related standards for your business.
20000-1
ISO/IEC 20000-1:2018
IT service management system
Rs 9,000 Rs 15,000
Non IAF CertificationFinal price. No GST charged.IAF option: Rs 20,500View certification22301
ISO 22301:2019
Business continuity management system
Rs 6,000 Rs 9,000
Non IAF CertificationFinal price. No GST charged.View certificationA SMALL STEP. A STRONGER BUSINESS.
Start your applicationReady to make it official?
ISO 9001: Non IAF Certification from Rs 2,500 · IAF Certification from Rs 4,000.
Non IAF Certification & IAF Certification · No GST chargedLET’S TALK ABOUT YOUR BUSINESSQuestions before
Questions before
you start?
Tell us what you need. We’ll help you understand scope, documents and the certification process.
A REAL PERSON. A CLEAR ANSWER.
Let’s get you certified.
Leave your details. We’ll help with the rest.