Privacy policy — ISMS.online

Cited by

Facts read from this source

• Entity name Report an error

  “Alliantist Limited (company registration number 4922343, place of registration in England and Wales) is the organisation behind ISMS.online.”

• Registered address Report an error

  “Nile House Nile Street Brighton, BN1 1HW”

• Supervisory authority Report an error

  “You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).”

• Certifications Report an error

  “our strong security credentials including UKAS certified ISO 27001 and ISO 27701”

• No special category data Report an error

  “We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data).”

• Breach notification target Report an error

  “Our intent is to notify within 24 hours of becoming aware of any breach.”

• UK data centre Report an error

  “For customers using our UK data centre: The UK is the primary processing location for your personal data within ISMS.online. For backup and redundancy purposes, a copy of that data is transferred to a data centre in Ireland.”

• EU data centre Report an error

  “For customers using our EU data centre: Germany is the primary processing location of your personal data within ISMS.online. For backup and redundancy purposes, a copy of that data is transferred to a data centre in Sweden.”

• Apac data centre Report an error

  “For customers using our APAC data centre: Australia is the primary processing location of your personal data within ISMS.online. All backup data is also held within a second data centre within Australia.”

• US data centre Report an error

  “For customers using our US data centre: US is the primary processing location of your personal data within ISMS.online. All backup data is also held within a second data centre within the US.”

• Transfer mechanism Report an error

  “it will only be transferred to countries that have been identified as providing adequate protection for UK data or to a third party where we have approved transfer mechanisms in place to protect your personal data like the European Commission’s Standard Contractual Clauses with the UK’s International Data Transfer Addendum”

• Controller role list Report an error

  “In our role as Data Controller the sub-processors used include: Anthropic, Atlassian, AWS (UK and Ireland), BrightTalk, Clay, Creditsafe, Euler, Fresh Financials, FreshWorks, GoCardless, Google, GTranslate, G2, Gartner Digital Markets, HubSpot, Hotjar, Insycle, ISMS.online, Akamai (formerly known as Linode), LinkedIn, Lovetts, Microsoft, OpenAI, Quotient, RingCentral, Storylane, Stripe, Trumpet, Typeform, Userflow, WordPress, Xero, ZoomInfo and Zuko.”

• Digital marketing agent Report an error

  “Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877, their Data Protection Officer can be emailed at: dpo@sopro.io.”

• Retention tax records Report an error

  “For example by law we have to keep basic information about customers for 6 years for tax and other purposes after they cease being customers.”

• Rights response time Report an error

  “We try to respond to all valid requests within one month.”

• Google drive Report an error

  “ISMS.online uses this access to provide the user with the Google Drive file picker and to create a link to the selected file(s). ISMS.online never accesses, or performs actions on, the file itself or on any other data held in Google by that user.”

• Transfer right Report an error

  “We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.”

• Policy version Report an error

  “This version was last updated on 11th November 2025 as version 3.19.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• Dp Ciso Data protection management depth
• Dp Ciso Integrations & automation
• Dp Ciso European sovereignty
• The Drafted Generalist Data protection management depth
• The Drafted Generalist Integrations & automation
• The Drafted Generalist European sovereignty
• The External DPO Data protection management depth
• The External DPO Integrations & automation
• The External DPO European sovereignty
• The IT Integrator Data protection management depth
• The IT Integrator Integrations & automation
• The IT Integrator European sovereignty
• The Lead Auditor Data protection management depth
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Skeptic Data protection management depth
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The CISO European sovereignty
• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The CISO European sovereignty
• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The CISO European sovereignty
• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The CISO European sovereignty
• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The CISO European sovereignty
• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The CISO European sovereignty
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Audit readiness & evidence
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Evidence Integrator European sovereignty
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer European sovereignty
• The Drafted IT Officer Asset & risk management depth
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer European sovereignty
• The Drafted IT Officer Asset & risk management depth
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer European sovereignty
• The Drafted IT Officer Asset & risk management depth
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer European sovereignty
• The Drafted IT Officer Asset & risk management depth
• The Drafted IT Officer Audit readiness & evidence
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer European sovereignty
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer European sovereignty
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Asset & risk management depth
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Asset & risk management depth
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Skeptic Asset & risk management depth
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Asset & risk management depth
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Asset & risk management depth
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Integrations & automation
• The Skeptic European sovereignty