Workday has become the fourth cloud company to be granted the ISO 27018 certification, demonstrating the stringent security it takes to protect its customers.
Alongside Microsoft, Amazon Web Services and Dropbox, the finance and HR cloud company was granted the data privacy certification after adhering to stringent regulations regarding security, confidentiality, availability, and privacy controls.
"ISO/IEC 27018:2014 establishes commonly accepted control objectives, controls and guidelines for implementing measures to protect Personally Identifiable Information (PII) in accordance with the privacy principles in ISO/IEC 29100 for the public cloud computing environment," the International Organization for Standardization (ISO) explained in the certification notice.
The principles relate to control objectives, controls and guidelines for implementing measures to protect personal information, which it ruled Workday does across its product line-up.
It ensures customers stay in control of their own data, with Workday only processing personally identifiable information provided to the company from customers, with complete transparency of how their data is returned, transferred and deleted if the agreement comes to an end. It will also advise the customer if any third parties who may need to access customer data and if any unauthorised person is ever able to obtain the information.
The ISO 27018 certification also restricts the data from being transmitted over public networks or stored on transportable media, while offering proper processes for data recovery and restoration.
Microsoft became the first cloud provider to obtain the ISO 27018 certification in February. The company said in a blog post: "The validation that we’ve adopted this standard is further evidence of our commitment to protect the privacy of our customers online."
