ISO/IEC 27001 is one of the most widely recognized independent international security standards. This certificate is awarded to organizations that comply with ISO's high global standards. ManageEngine has earned ISO/IEC 27001:2013 certification for Applications, Systems, People, Technology, and Processes

Applicable to: All cloud services and on-premise products of ManageEngine and Site24x7.

ISO/IEC 27017 gives guidelines for information security controls applicable to the provision and use of cloud services by providing additional implementation guidance for relevant controls specified in ISO/IEC 27002 and additional controls with implementation guidance that specifically relate to cloud services.

ManageEngine is certified with ISO/IEC 27017:2015 - Information technology - Security techniques - Code of practice for information security controls based on ISO/IEC 27002 for cloud services.

Applicable to: All cloud services of ManageEngine and Site24x7.

ISO/IEC 27018 establishes commonly accepted control objectives, controls and guidelines for implementing measures on safeguarding the PII that is processed in a public cloud. These controls are an extension of ISO/IEC 27001 and ISO/IEC 27002, ISO/IEC 27018 which provide guidance to organizations concerned about how their cloud providers are handing personally identifiable information (PII).

Applicable to: All cloud services of ManageEngine and Site24x7.

ISO 9001:2015 is defined as the international standard that specifies requirements for a quality management system (QMS). Organizations use this standard to demonstrate the ability to consistently provide quality products and services that meet customer and regulatory requirements.

Applicable to: ServiceDesk Plus Cloud along with all cloud and on-premises products in the unified endpoint management and security suite.

ISO/IEC 20000 is the leading international IT Service Management System (SMS) standard, with the objective to ensure the quality of the IT services. It specifies requirements for an organization to establish, implement, maintain and continually improve a service management system and it supports the management of the service lifecycle, including the planning, design, transition, delivery and improvement of services to meet the service requirements and deliver value.

Applicable to: Network Operations Center (NOC) and Data Center (DC) Operations of Zoho Corporation. ManageEngine is the IT management division of Zoho Corporation.

ManageEngine is SOC 2 Type II compliant. SOC 2 is an evaluation of the design and operating effectiveness of controls that meet the AICPA's Trust Services Principles criteria.

Applicable to: All cloud services and on-premise products of ManageEngine and Site24x7.

SOC 2 + HIPAA - An independent third-party audit firm has examined the description of the system related to Application Development, Production Support and the related General Information Technology Controls for the services provided to customers, from Zoho offshore development centre, based on Security, Privacy and breach requirements set forth in the Health Insurance Portability and Accountability Act (“HIPAA”) Administrative Simplification. The responsibility of Zoho is limited to the extent it acts as a 'Business Associate'.

Applicable to: ServiceDesk Plus, ServiceDesk Plus Cloud, Endpoint Central, ADManager Plus and Endpoint Central MSP.

The Cloud Security Alliance is a non-profit organization formed to define and raise awareness of best practices to help ensure a secure cloud computing environment and to help potential cloud customers make informed decisions when transitioning their IT operations to the cloud.The Consensus Assessments Initiative Questionnaire(CAIQ) is submitted by the cloud providers to document compliance with the Cloud Controls Matrix (CCM) and helps cloud service customers to assess the security capabilities and practices of a cloud service provider.

Applicable to: All cloud services of ManageEngine and Site24x7.

GDPR is a pan-European regulation that requires businesses to protect the personal data and privacy of EU citizens for processing of their personal data.

ManageEngine has always demonstrated its commitment to its user's data privacy by consistently exceeding industry standards. ManageEngine welcomes GDPR as a strengthening force of the privacy-consciousness that already exists in it.

ManageEngine's offerings have privacy features that comply to GDPR, and ManageEngine's processing of its customer's data adheres to the data protection principles of the GDPR.

CCPA is a data privacy law specific to the processing of personal information of California residents that requires businesses to protect their personal information and provides privacy.

ManageEngine has always demonstrated its commitment to its user's data privacy by consistently exceeding industry standards. ManageEngine welcomes CCPA as a strengthening force of the privacy-consciousness that already exists in it.

ManageEngine's offerings have privacy features that enable it's users to comply with the CCPA, and ManageEngine's processing of its Californian customer's data adheres to requirements of the CCPA.

Signal spam reports help in providing FBL data, primarily technical information for identification of spammers and marketing abuse, from major ISPs like Orange.fr, SFR.fr, and so on. It has many spam reporting plugins for third-party browsers and email clients, focused at the French communities worldwide. It’s important for both Zoho corporation and our customers to know all the recipients who mark or report the emails they receive as ‘spam’, so that we can remove them from the lists. Hence, this certification protects our network reputation in the French region.

Applicable to: Zoho Corporation. ManageEngine is the IT management division of Zoho Corporation.

ESQUEMA NACIONAL DE SEGURIDAD (ENS) - Spain, also known as National Security Scheme is a regulation in Spain. The ENS refers to the National Security Framework in Spain. It is a set of regulations and guidelines established by the Spanish government to ensure the security of information and communication systems in public administrations. The ENS provides a framework for managing and protecting information assets, promoting risk management, and establishing security measures to safeguard sensitive information. It is applicable to all public entities in Spain, including government agencies, local administrations, and public organizations. Zoho Corporation is ENS certified with intermediate category(medium level).

Applicable to: All cloud and on-premises solutions of ManageEngine, Site24x7.

Cyber Essentials is a UK government-backed scheme designed to help organizations protect themselves against common cyberthreats. It outlines a set of basic cybersecurity controls that all organizations can implement to mitigate risks and demonstrate a commitment to cybersecurity.

Applicable to: The UK and EU data centers of ManageEngine, all cloud services offerings, and their corresponding administrative networks only, excluding all other networks of ManageEngine.

Texas Risk and Authorization Management Program (TX-RAMP) is a certification process designed by the Texas Department of Information Resources (DIR) to ensure that cloud products and services meet stringent security and privacy standards. Cloud Service Providers (CSPs) intending to contract with Texas state agencies must adhere to TX-RAMP requirements.

By following the TX-RAMP certification and adhering to its requirements, CSPs can ensure they meet the security standards necessary to protect sensitive data and comply with Texas state regulations.

Applicable to: ServiceDesk Plus Cloud

Applicable to: Endpoint Central Cloud