ISO 27701

ISO 27701 provides a standard for data privacy controls and establishes the parameters for Privacy Information Management Systems (PIMS). The ISO 27701 standard lays out a detailed set of operational checklists that help ZoomInfo adapt to a variety of regulations relating to privacy protection and processing personally identifiable information (PII), including the EU's GDPR, California’s CPRA and other data privacy requirements.

ISO 27001

ISO 27001 is the international standard for Information Security. The Standard formally establishes requirements for an Information Security Management System (ISMS). It also includes requirements for the assessment and treatment of information security risks and the mandate to mitigate those risks accordingly. The ISMS standard’s best-practice methodology helps ZoomInfo manage its information security risks by addressing people and processes in addition to technology.

AICPA SOC

A SOC 2 audit report examines how a company implements internal controls to safeguard customer data and if those controls are operating effectively. The audit gives detailed information about a service organization's security and confidentiality based on their conformity with the AICPA's (American Institute of Certified Public Accountants) Trust Services Criteria.

TRUSTe

A certification of compliance for nearly 50 GDPR Privacy Practices and Validation of requirements comprising the TrustArc GDPR Privacy Practices. This validation demonstrates that the processing of personal information conducted by ZoomInfo is performed in total compliance of the EU General Data Protection Regulation (GDPR). This includes data minimizations, data retention, international data, automation, and on-going privacy reviews.

IAPP Gold Member

The International Association of Privacy Professionals (IAPP) is the largest global information privacy community and resource, helping practitioners develop and advance their careers and organizations manage and protect their data. The IAPP is responsible for developing and launching the only globally recognized credentialing programs in information privacy while also leading privacy certifications for thousands of professionals around the world.

FPF

The Future of Privacy Forum (FPF) and FPF Education and Innovation Foundation are non-profit organizations serving as catalysts for privacy leadership and education, working to advance principled data practices in support of emerging technologies.

CIPL

The Centre for Information Policy Leadership (CIPL) is a leading global privacy and data policy think tank based in Washington, DC, Brussels and London that works with industry leaders, regulatory authorities and policy makers around the world to help frame and advance data privacy policy, law and best practice.

WISP

Women in Security and Privacy (WISP) aims to help advance women to lead the future of data privacy and security through the strategic methods such as education, mentorship & networking, leadership, and supporting advancement of careers. WISP also plays a significant role in researching new ways to include more women in the security and privacy industry.

SAFECode

SAFECode is a global nonprofit organization that brings business leaders and technical experts together to exchange insights and ideas on creating, improving and promoting scalable and effective software security programs. SAFECode Members are expected to contribute information about their security processes and practices to the organization’s efforts to advance software assurance methods and positively impact the security and reliability of the technology ecosystem.