Conformity
Our security, privacy, and compliance controls have successfully passed rigorous independent evaluations by both internal and external auditors, showing our commitment to helping you achieve your goals.

Segura® has achieved the LGPD Check certification from the consultancy Privacy Guaranteed. This certification confirms adherence to the highest level of compliance with the LGPD. This certification follows an independent external audit, evaluating our implemented measures against the minimum legal and regulatory requirements and international information security frameworks.

We comply with the world's most stringent data protection legislation. We are the first PAM solution to achieve certification through TrustArc's audit.

The SOC 2 Type 2 report, issued by an independent auditor, certifies that Segura® designs, implements, and operates in accordance with the AICPA's criteria for reliable service, availability, processing integrity, and confidentiality. This certification was obtained after a detailed audit of the Segura® 360º Privilege SaaS platform, evaluating both our system and the organization of our services.

The SOC 3 Type II report, issued by independent auditors, confirms that our company has comprehensive controls and processes in place to safeguard customer data. These controls span information security, risk management, regulatory compliance, and IT operations.
SOC 3 offers several advantages:
• Public Reporting: Simplifies sharing with leads and partners, with no restrictions;
• Enhanced Reliability: Boosts confidence in our services and data protection;
• Globally Recognized Standard: Demonstrates our commitment to top-tier information security practices.
By adding SOC 3 to SOC 2, we not only solidify our position as a leader in information security within the market, but also reaffirm our unwavering commitment to the highest standards of data protection and information security.

At Segura®, our purpose is to use technology to drive prosperity, guided by the value of Ubuntu: "I am because we are". This value permeates all business areas, demonstrating our dedication to community and collaboration. Our commitment to sustainability and transparency is evident in our environmental, social, and governance practices. These practices reflect our continuous commitment to our culture of customer focus, energy, joy, results, and change.

Segura® is part of a group of institutions qualified by the CVE® Program (Common Vulnerabilities and Exposures) to identify, attribute and publish software vulnerabilities. As a CNA (CVE Numbering Authority), Segura® can point out CVEs in its own products and also report cyber flaws and vulnerabilities found in third-party software, which means cooperating with the global community to strengthen cybersecurity in response to growing cyber threats.

Section 889 (a)(1)(B) prohibits U.S. government agencies from contracting organizations that utilize telecommunications equipment or services provided by certain companies identified as national security risks, including Huawei Technologies Company, ZTE Corporation, Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, and Dahua Technology Company. After a thorough and meticulous review, our company certifies that it does not use telecommunications equipment or services from the listed companies, nor incorporates any technology, system, or infrastructure dependent on these solutions.

Our Information Security Management System (ISMS) is certified by an independent audit, validating that Segura operates under the strictest international security standards.This certification demonstrates that all our policies, controls, and processes meet the requirements of the standard, ensuring that you can fully trust in the protection, confidentiality, integrity, and availability of your data when using our solution.

Expanding our commitment to protecting your privacy, we achieved ISO/IEC 27701:2019 certification through an independent audit, further strengthening Segura’s security posture.This certification confirms that our solutions are aligned with the highest international standards for privacy management, giving you peace of mind that your personal data is handled with maximum protection, transparency, and full compliance with major data protection regulations.