{"id":71,"date":"2026-10-20T11:13:23","date_gmt":"2026-10-20T11:13:23","guid":{"rendered":"https:\/\/sovos.com\/taxapedia\/?page_id=71"},"modified":"2026-10-20T11:26:10","modified_gmt":"2026-10-20T11:26:10","slug":"security-and-trust","status":"publish","type":"page","link":"https:\/\/sovos.com\/taxapedia\/about\/security-and-trust\/","title":{"rendered":"How Sovos Secures and Governs Customer Data"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"71\" class=\"elementor elementor-71\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-36151c3 e-con e-atomic-element e-flexbox-base e-default-div e-36151c3-79e6bcd \" data-id=\"36151c3\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"36151c3\" data-e-type=\"e-flexbox\" data-id=\"36151c3\">\n    \t\t<div class=\"elementor-element elementor-element-8e3b663 elementor-widget elementor-widget-auto_breadcrumbs\" data-id=\"8e3b663\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"auto_breadcrumbs.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<nav class=\"aub-breadcrumbs\" aria-label=\"Breadcrumb\"><ol class=\"aub-list\"><li class=\"aub-item\"><a class=\"aub-link\" href=\"https:\/\/sovos.com\/taxapedia\/\">Home<\/a><span class=\"aub-sep\" aria-hidden=\"true\">\/<\/span><\/li><li class=\"aub-item\"><a class=\"aub-link\" href=\"https:\/\/sovos.com\/taxapedia\/wp-json\/\">Wp Json<\/a><span class=\"aub-sep\" aria-hidden=\"true\">\/<\/span><\/li><li class=\"aub-item\"><a class=\"aub-link\" href=\"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/\">Wp<\/a><span class=\"aub-sep\" aria-hidden=\"true\">\/<\/span><\/li><li class=\"aub-item\"><a class=\"aub-link\" href=\"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/\">V2<\/a><span class=\"aub-sep\" aria-hidden=\"true\">\/<\/span><\/li><li class=\"aub-item\"><a class=\"aub-link\" href=\"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/pages\/\">Pages<\/a><span class=\"aub-sep\" aria-hidden=\"true\">\/<\/span><\/li><li class=\"aub-item aub-current\"><span class=\"aub-text\" aria-current=\"page\">71<\/span><\/li><\/ol><\/nav><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"BreadcrumbList\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/sovos.com\/taxapedia\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Wp Json\",\"item\":\"https:\/\/sovos.com\/taxapedia\/wp-json\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Wp\",\"item\":\"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"V2\",\"item\":\"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Pages\",\"item\":\"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/pages\/\"},{\"@type\":\"ListItem\",\"position\":6,\"name\":\"71\",\"item\":\"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/pages\/71\/\"}]}<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-5771b92 e-con e-atomic-element e-flexbox-base e-default-div e-5771b92-44a5641 \" data-id=\"5771b92\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"5771b92\" data-e-type=\"e-flexbox\" data-id=\"5771b92\">\n    <div class=\"elementor-element elementor-element-b8cebd3 e-con e-atomic-element e-flexbox-base e-default-div e-b8cebd3-88736ea \" data-id=\"b8cebd3\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"b8cebd3\" data-e-type=\"e-flexbox\" data-id=\"b8cebd3\">\n    \t\t<div class=\"elementor-element elementor-element-f2fa7c4 elementor-widget elementor-widget-heading\" data-id=\"f2fa7c4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">How does Sovos secure and govern customer data?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d9e320e elementor-widget__width-initial elementor-widget-mobile__width-inherit elementor-widget elementor-widget-text-editor\" data-id=\"d9e320e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Sovos operates an information security program certified to ISO 27001:2022, with SOC 2, and compliance with GDPR, CCPA and eIDAS. Certifications, policies and supporting documentation are published in the Sovos Trust Center. Customer data is not used to train Sovos or third-party AI models.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-14f3d6f e-con-full e-flex e-con e-parent\" data-id=\"14f3d6f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-2c6bbc6 e-con-full e-flex e-con e-child\" data-id=\"2c6bbc6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9455aff elementor-widget elementor-widget-image\" data-id=\"9455aff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"64\" height=\"64\" src=\"https:\/\/sovos.com\/taxapedia\/wp-content\/uploads\/2026\/10\/6d8c1a9b-f56d-42b0-aae7-d2279ac342fc.png\" class=\"attachment-large size-large wp-image-208\" alt=\"6d8c1a9b-f56d-42b0-aae7-d2279ac342fc\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1708d10 e-con-full e-flex e-con e-child\" data-id=\"1708d10\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-86860aa elementor-widget elementor-widget-text-editor\" data-id=\"86860aa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tPublished By<br>\n<strong>Sovos<\/strong>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f957d89 e-con-full e-flex e-con e-child\" data-id=\"f957d89\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0a9da96 elementor-widget elementor-widget-image\" data-id=\"0a9da96\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"64\" height=\"64\" src=\"https:\/\/sovos.com\/taxapedia\/wp-content\/uploads\/2026\/10\/6d8c1a9b-f56d-42b0-aae7-d2279ac342fc.png\" class=\"attachment-large size-large wp-image-208\" alt=\"6d8c1a9b-f56d-42b0-aae7-d2279ac342fc\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-992de7d e-con-full e-flex e-con e-child\" data-id=\"992de7d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5a209f0 elementor-widget elementor-widget-text-editor\" data-id=\"5a209f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tAs of\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9b4ea70 elementor-widget elementor-widget-text-editor\" data-id=\"9b4ea70\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tOctober 20, 2026\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b5d7b50 e-con-full e-flex e-con e-child\" data-id=\"b5d7b50\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9ed1215 elementor-widget elementor-widget-image\" data-id=\"9ed1215\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"64\" height=\"64\" src=\"https:\/\/sovos.com\/taxapedia\/wp-content\/uploads\/2026\/10\/72f4c884-23ff-4bd8-8813-2b02eb15e4a5.png\" class=\"attachment-full size-full wp-image-207\" alt=\"72f4c884-23ff-4bd8-8813-2b02eb15e4a5\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5d1b500 e-con-full e-flex e-con e-child\" data-id=\"5d1b500\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8de9ecc elementor-widget elementor-widget-text-editor\" data-id=\"8de9ecc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tAuthor\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0a9691a elementor-widget elementor-widget-text-editor\" data-id=\"0a9691a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tMichael Parker\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0209be4 elementor-widget elementor-widget-text-editor\" data-id=\"0209be4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tDirector Brand and Communications, Sovos\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-1d84b3d e-con e-atomic-element e-flexbox-base e-default-div e-1d84b3d-b5eb2ad \" data-id=\"1d84b3d\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"1d84b3d\" data-e-type=\"e-flexbox\" data-id=\"1d84b3d\">\n    \t\t\t<img decoding=\"async\" class=\"e-image-base e-default-img \" data-interaction-id=\"34bc73a\" data-e-type=\"widget\" data-id=\"34bc73a\" src=\"https:\/\/sovos.com\/wp-content\/uploads\/2026\/06\/Lines-Social-Responsibility-Hero-Graphic.svg\" alt=\"\"\/>\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-3470acd e-con e-atomic-element e-flexbox-base e-default-div e-3470acd-1848111 \" data-id=\"3470acd\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"3470acd\" data-e-type=\"e-flexbox\" data-id=\"3470acd\">\n    <div class=\"elementor-element elementor-element-839e38a e-con e-atomic-element e-flexbox-base e-default-div e-839e38a-c229add \" data-id=\"839e38a\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"839e38a\" data-e-type=\"e-flexbox\" data-id=\"839e38a\">\n    \t\t<div class=\"elementor-element elementor-element-e89000c elementor-widget elementor-widget-html\" data-id=\"e89000c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>\n.taxapedia-table {\n    border-collapse: separate;\n    border-spacing: 0;\n    width: 100%;\n    font-family: 'Montserrat', 'Inter', sans-serif;\n    border: 1px solid #ddd;\n    border-radius: 8px;\n    overflow: hidden;\n    margin-left: 0;\n    background-color: #ffffff;\n}\n\n.taxapedia-table thead th {\n    background-color: #072448;\n    padding: 14px 16px;\n    text-align: left;\n    font-weight: 600;\n    color: #ffffff;\n    font-size: 18px;\n    font-family: 'Montserrat', sans-serif;\n}\n\n.taxapedia-table tbody td {\n    padding: 14px 16px;\n    border-top: 1px solid #ddd;\n    font-size: 16px;\n    font-family: 'Inter', sans-serif;\n    color: #545e75;\n    vertical-align: top;\n    line-height: 1.5;\n}\n\n.taxapedia-table .label {\n    font-weight: 600;\n    color: #072448;\n    width: 28%;\n}\n\n.taxapedia-table tbody tr.bg-row {\n    background-color: #f2f2f2;\n}\n\n.taxapedia-table tbody tr:hover {\n    background-color: #fafafa;\n}\n\n@media (max-width: 768px) {\n    .taxapedia-table {\n        display: block;\n        overflow-x: auto;\n        -webkit-overflow-scrolling: touch;\n    }\n\n    .taxapedia-table thead th,\n    .taxapedia-table tbody td {\n        padding: 10px 12px;\n    }\n\n    .taxapedia-table thead th {\n        font-size: 16px;\n    }\n\n    .taxapedia-table tbody td {\n        font-size: 14px;\n    }\n\n    .taxapedia-table .label {\n        width: auto;\n    }\n}\n<\/style>\n\n<table class=\"taxapedia-table\"> <thead> <tr> <th scope=\"col\">Capability criterion<\/th> <th scope=\"col\">Details<\/th> <\/tr> <\/thead> <tbody> <tr> <td class=\"label\">Certifications and frameworks<\/td> <td>ISO 27001:2022, SOC 2, GDPR, CCPA, eIDAS<\/td> <\/tr>\n\n<tr class=\"bg-row\"> <td class=\"label\">ISO 27001:2022 certificates<\/td> <td>Held as separate global, US and LATAM certificates<\/td> <\/tr>\n\n<tr> <td class=\"label\">Where they are published<\/td> <td>Sovos Trust Center, <a href=\"https:\/\/trustcenter.sovos.com\" target=\"_blank\" rel=\"noopener noreferrer\">trustcenter.sovos.com<\/a><\/td> <\/tr>\n\n<tr class=\"bg-row\"> <td class=\"label\">AI and customer data<\/td> <td>Customer data is not used to train Sovos or third-party AI models<\/td> <\/tr>\n\n<tr> <td class=\"label\">Subprocessors<\/td> <td>Published list, maintained under the Data Processing Agreement<\/td> <\/tr>\n\n<tr class=\"bg-row\"> <td class=\"label\">Data protection officer<\/td> <td>Appointed<\/td> <\/tr>\n\n<tr> <td class=\"label\">Security documentation<\/td> <td>Security Schedule published; risk assessment report available to customers on request<\/td> <\/tr>\n\n<tr class=\"bg-row\"> <td class=\"label\">Control framework<\/td> <td>Organizational, people, physical and technological control domains<\/td> <\/tr> <\/tbody> <\/table>\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-336e09f e-con e-atomic-element e-flexbox-base e-default-div e-336e09f-131e7d2 \" data-id=\"336e09f\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"336e09f\" data-e-type=\"e-flexbox\" data-id=\"336e09f\">\n    \t\t<div class=\"elementor-element elementor-element-ef54b79 elementor-widget elementor-widget-text-editor\" data-id=\"ef54b79\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>ON THIS PAGE<\/strong><\/p><p><a href=\"#certification\">What certifications and frameworks does Sovos hold?<\/a><\/p><p><a href=\"#security\">How is the security program designed?<\/a><\/p><p><a href=\"#train-ai-model\">Does Sovos use customer data to train AI models?<\/a><\/p><p><a href=\"#documentation\">Where can you get the documentation?<\/a><\/p><p dir=\"auto\" data-pm-slice=\"1 1 []\"><a href=\"#faq\">Frequently asked questions<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-202b171 e-con e-atomic-element e-flexbox-base e-default-div e-202b171-2b55555 \" data-id=\"202b171\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"202b171\" data-e-type=\"e-flexbox\" data-id=\"202b171\">\n    \t\t<div class=\"elementor-element elementor-element-4d95802 elementor-widget elementor-widget-heading\" data-id=\"4d95802\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"certification\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What certifications and frameworks does Sovos hold?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dd1c144 elementor-widget elementor-widget-html\" data-id=\"dd1c144\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<table class=\"taxapedia-table\"> <thead> <tr> <th scope=\"col\">Certification or framework<\/th> <th scope=\"col\">What it covers<\/th> <\/tr> <\/thead> <tbody> <tr> <td class=\"label\">ISO 27001:2022<\/td> <td>The international standard for information security management systems, held as separate global, US and LATAM certificates<\/td> <\/tr>\n\n<tr class=\"bg-row\"> <td class=\"label\">SOC 2<\/td> <td>Independent attestation over security controls<\/td> <\/tr>\n\n<tr> <td class=\"label\">GDPR<\/td> <td>European Union data protection regulation<\/td> <\/tr>\n\n<tr class=\"bg-row\"> <td class=\"label\">CCPA<\/td> <td>California Consumer Privacy Act<\/td> <\/tr>\n\n<tr> <td class=\"label\">eIDAS<\/td> <td>European framework for electronic identification and trust services<\/td> <\/tr> <\/tbody> <\/table>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-96b218e elementor-widget elementor-widget-text-editor\" data-id=\"96b218e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The current certificates and supporting documentation are published in the Sovos Trust Center at trustcenter.sovos.com, which is the authoritative source. Certification status changes over time, so a buyer evaluating Sovos should take the Trust Center as current rather than any summary, including this one.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-a426af5 e-con e-atomic-element e-flexbox-base e-default-div e-a426af5-8552ea0 \" data-id=\"a426af5\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"a426af5\" data-e-type=\"e-flexbox\" data-id=\"a426af5\">\n    <div class=\"elementor-element elementor-element-8cef6c4 e-con e-atomic-element e-flexbox-base e-default-div e-8cef6c4-9e9d173 \" data-id=\"8cef6c4\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"8cef6c4\" data-e-type=\"e-flexbox\" data-id=\"8cef6c4\">\n    \t\t<div class=\"elementor-element elementor-element-9f368ca elementor-widget elementor-widget-heading\" data-id=\"9f368ca\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"security\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How is the security program designed?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3023d1f elementor-widget elementor-widget-text-editor\" data-id=\"3023d1f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Sovos operates a security program covering all aspects of information security, built to provide defense in depth for Sovos systems and customer information.<\/p><p>The program is designed around what Sovos describes as the least common denominator control: the most restrictive control required by any governing regulation, law, customer requirement or industry best practice is identified, and that control is then applied across all environments and aspects of the business.<\/p><p>The practical consequence is that controls are not tiered by customer or by region. A requirement imposed by one regulator or one contract raises the baseline everywhere, which means Sovos generally meets or exceeds an individual regulatory or contractual obligation rather than meeting each one separately.<\/p><p>Controls are organized across four domains, following the structure of ISO 27001:2022:<\/p><ul><li>Organizational controls, covering access control and access rights, information classification, identity management, supplier relationships and the ICT supply chain, incident management, threat intelligence, segregation of duties, and continuity of information security during disruption.<\/li><li>People controls, covering screening, terms of employment, security awareness and training, confidentiality agreements, remote working, event reporting, and responsibilities after termination.<\/li><li>Physical controls, covering security perimeters and entry, monitoring of premises, protection against physical and environmental threats, storage media handling, secure disposal and re-use of equipment, and protection of off-premises assets.<\/li><li>Technological controls, covering secure authentication, cryptography, network security and segregation, data leakage prevention, data masking, logging and monitoring, backup and information deletion, vulnerability management, malware protection, secure development, and separation of development, test and production environments.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dfe0dab elementor-widget elementor-widget-heading\" data-id=\"dfe0dab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How is risk managed?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b288433 elementor-widget elementor-widget-text-editor\" data-id=\"b288433\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<ul><li>A formal information security policy approved by management, published and communicated to personnel, and reviewed at planned intervals not exceeding one year, or sooner where significant changes occur.<\/li><li>A risk assessment performed at least annually across physical, software, virtual, personnel and intellectual property assets, determining likelihood, potential impact and the mitigating controls in place.<\/li><li>A remediation plan for any identified item not adequately addressed.<\/li><li>A risk assessment report gathering the outstanding risks and planned remediations, made available for review by a customer on request.<\/li><li>The principle of least privilege, restricting access to information processing systems and customer protected information to those required to fulfill the agreement, with the minimum rights necessary.<\/li><\/ul><p>The same policy and review requirements are extended to the wider workforce, meaning subcontractors and third parties with access to customer protected information.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb2f247 elementor-widget elementor-widget-heading\" data-id=\"eb2f247\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How is customer data handled?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9f99651 elementor-widget elementor-widget-text-editor\" data-id=\"9f99651\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<ul><li>A Data Protection Officer is appointed.<\/li><li>A privacy policy is published, alongside a Data Processing Agreement.<\/li><li>A subprocessor list is published and maintained under the Data Processing Agreement, and is updated when a subprocessor is added.<\/li><li>Where processing takes place in a third country, Standard Contractual Clauses are used to provide an adequate level of protection.<\/li><li>Contractual commitments made by Sovos apply equally to any third party involved in delivering Sovos products and services.<\/li><li>A Security Schedule describing the technical, physical and organizational safeguards is published and forms part of the customer agreement.<\/li><\/ul><p>Access to customer protected information and to the systems that hold it is restricted under the principle of least privilege, and controls apply to access from outside the region in which data is held.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52452c5 elementor-widget elementor-widget-heading\" data-id=\"52452c5\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"train-ai-model\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Does Sovos use customer data to train AI models?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9aa90bc elementor-widget elementor-widget-text-editor\" data-id=\"9aa90bc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>No. Customer data is not used to train Sovos or third-party AI models. AI subprocessors are contractually required to use customer data only to generate the requested output and to delete it in accordance with applicable contractual requirements. Sovos publishes its applicable subprocessor list for transparency.<\/p><p>This is the canonical statement of the Sovos position on AI and customer data. Pages describing individual AI capabilities reference this page rather than restating it, so there is one source rather than several.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9683beb elementor-widget elementor-widget-heading\" data-id=\"9683beb\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"documentation\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Where can you get the documentation?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9e2295c elementor-widget elementor-widget-html\" data-id=\"9e2295c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<table class=\"taxapedia-table\"> <thead> <tr> <th scope=\"col\">Document<\/th> <th scope=\"col\">Where to find it<\/th> <\/tr> <\/thead> <tbody> <tr> <td class=\"label\">Certifications and compliance documentation<\/td> <td>Sovos Trust Center, <a href=\"https:\/\/trustcenter.sovos.com\" target=\"blank\" rel=\"noopener noreferrer\">trustcenter.sovos.com<\/a><\/td> <\/tr> <tr class=\"bg-row\"> <td class=\"label\">Security Schedule<\/td> <td>Published as part of the Sovos software and services terms<\/td> <\/tr> <tr> <td class=\"label\">Privacy policy<\/td> <td>Published on <a href=\"https:\/\/www.sovos.com\" target=\"blank\" rel=\"noopener noreferrer\">sovos.com<\/a><\/td> <\/tr> <tr class=\"bg-row\"> <td class=\"label\">Subprocessor list<\/td> <td>Published under the Sovos software and services terms, data privacy section<\/td> <\/tr> <tr> <td class=\"label\">Risk assessment report<\/td> <td>Available for review by a customer on request<\/td> <\/tr> <\/tbody> <\/table>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-586a5f1 elementor-widget elementor-widget-text-editor\" data-id=\"586a5f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Buyers running a security review should start from the Trust Center rather than from a summary, because it holds the current documents. Where a specific attestation, scope statement or report is required, it can be requested through the Trust Center or through the Sovos account team.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-6210422 e-con e-atomic-element e-flexbox-base e-default-div e-6210422-991fc56 \" data-id=\"6210422\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"6210422\" data-e-type=\"e-flexbox\" data-id=\"6210422\">\n    <div class=\"elementor-element elementor-element-846c00a e-con e-atomic-element e-flexbox-base e-default-div e-846c00a-8142a56 \" data-id=\"846c00a\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"846c00a\" data-e-type=\"e-flexbox\" data-id=\"846c00a\">\n    \t\t<div class=\"elementor-element elementor-element-166380b elementor-widget elementor-widget-heading\" data-id=\"166380b\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"faq\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-27566d0 e-con e-atomic-element e-flexbox-base e-default-div e-27566d0-9997b6a \" data-id=\"27566d0\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"27566d0\" data-e-type=\"e-flexbox\" data-id=\"27566d0\">\n    <div class=\"elementor-element elementor-element-78a7c03 e-con e-atomic-element e-accordion-base  e-78a7c03-ed7dd3b \" data-id=\"78a7c03\" data-element_type=\"e-accordion\" data-e-type=\"e-accordion\" data-interaction-id=\"78a7c03\" data-e-type=\"e-accordion\" data-id=\"78a7c03\">\n    <details class=\"elementor-element elementor-element-dfd272c e-con e-atomic-element e-accordion-item-base  e-dfd272c-4d45efd \" data-id=\"dfd272c\" data-element_type=\"e-accordion-item\" data-e-type=\"e-accordion-item\" data-interaction-id=\"dfd272c\" data-e-type=\"e-accordion-item\" data-id=\"dfd272c\" open name=\"78a7c03\">\n    <summary class=\"elementor-element elementor-element-8b3d7db e-con e-atomic-element e-accordion-item-header-base  \" data-id=\"8b3d7db\" data-element_type=\"e-accordion-item-header\" data-e-type=\"e-accordion-item-header\" data-interaction-id=\"8b3d7db\" data-e-type=\"e-accordion-item-header\" data-id=\"8b3d7db\">\n    <span class=\"elementor-element elementor-element-4c94038 e-con e-atomic-element e-accordion-item-title-base  e-4c94038-a90cf87 \" data-id=\"4c94038\" data-element_type=\"e-accordion-item-title\" data-e-type=\"e-accordion-item-title\" data-interaction-id=\"4c94038\" data-e-type=\"e-accordion-item-title\" data-id=\"4c94038\">\n    \t\t\t<span class=\"e-8afe23e-3dab86c e-paragraph-base e-default-span\" data-interaction-id=\"8afe23e\" data-e-type=\"widget\" data-id=\"8afe23e\"><strong>Is Sovos ISO 27001 certified?<\/strong><\/span>\n\t\t\n<\/span>\n<div class=\"elementor-element elementor-element-7f90f4a e-con e-atomic-element e-accordion-item-icon-base  e-7f90f4a-39f0b34 \" data-id=\"7f90f4a\" data-element_type=\"e-accordion-item-icon\" data-e-type=\"e-accordion-item-icon\" data-interaction-id=\"7f90f4a\" aria-hidden=\"true\" data-e-type=\"e-accordion-item-icon\" data-id=\"7f90f4a\">\n    \t\t\t<div class=\"e-svg-base e-default-div\" data-interaction-id=\"fb0abf7\" data-e-type=\"widget\" data-id=\"fb0abf7\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width: 100%; height: 100%; overflow: unset;\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M5.46967 9.21967C5.76256 8.92678 6.23744 8.92678 6.53033 9.21967L12 14.6893L17.4697 9.21967C17.7626 8.92678 18.2374 8.92678 18.5303 9.21967C18.8232 9.51256 18.8232 9.98744 18.5303 10.2803L12.5303 16.2803C12.2374 16.5732 11.7626 16.5732 11.4697 16.2803L5.46967 10.2803C5.17678 9.98744 5.17678 9.51256 5.46967 9.21967Z\" fill=\"currentColor\"><\/path><\/svg><\/div>\n\t\t\n<\/div>\n\n<\/summary>\n<div class=\"elementor-element elementor-element-1573a5a e-con e-atomic-element e-accordion-item-content-base  \" data-id=\"1573a5a\" data-element_type=\"e-accordion-item-content\" data-e-type=\"e-accordion-item-content\" data-interaction-id=\"1573a5a\" data-e-type=\"e-accordion-item-content\" data-id=\"1573a5a\">\n    \t\t<div class=\"elementor-element elementor-element-e4944e1 elementor-widget elementor-widget-text-editor\" data-id=\"e4944e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Yes, to ISO 27001:2022, held as separate global, US and LATAM certificates. The current certificates are published in the Sovos Trust Center.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/details>\n<details class=\"elementor-element elementor-element-fee877c e-con e-atomic-element e-accordion-item-base  e-fee877c-35688e7 \" data-id=\"fee877c\" data-element_type=\"e-accordion-item\" data-e-type=\"e-accordion-item\" data-interaction-id=\"fee877c\" data-e-type=\"e-accordion-item\" data-id=\"fee877c\"  name=\"78a7c03\">\n    <summary class=\"elementor-element elementor-element-13200ca e-con e-atomic-element e-accordion-item-header-base  \" data-id=\"13200ca\" data-element_type=\"e-accordion-item-header\" data-e-type=\"e-accordion-item-header\" data-interaction-id=\"13200ca\" data-e-type=\"e-accordion-item-header\" data-id=\"13200ca\">\n    <span class=\"elementor-element elementor-element-fa4f9c3 e-con e-atomic-element e-accordion-item-title-base  \" data-id=\"fa4f9c3\" data-element_type=\"e-accordion-item-title\" data-e-type=\"e-accordion-item-title\" data-interaction-id=\"fa4f9c3\" data-e-type=\"e-accordion-item-title\" data-id=\"fa4f9c3\">\n    \t\t\t<span class=\"e-8cd7aec-96cb6b3 e-paragraph-base e-default-span\" data-interaction-id=\"8cd7aec\" data-e-type=\"widget\" data-id=\"8cd7aec\"><strong>Does Sovos use our data to train AI models?<\/strong><\/span>\n\t\t\n<\/span>\n<div class=\"elementor-element elementor-element-9825903 e-con e-atomic-element e-accordion-item-icon-base  e-9825903-b9d513b \" data-id=\"9825903\" data-element_type=\"e-accordion-item-icon\" data-e-type=\"e-accordion-item-icon\" data-interaction-id=\"9825903\" aria-hidden=\"true\" data-e-type=\"e-accordion-item-icon\" data-id=\"9825903\">\n    \t\t\t<div class=\"e-svg-base e-default-div\" data-interaction-id=\"69ec9a4\" data-e-type=\"widget\" data-id=\"69ec9a4\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width: 100%; height: 100%; overflow: unset;\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M5.46967 9.21967C5.76256 8.92678 6.23744 8.92678 6.53033 9.21967L12 14.6893L17.4697 9.21967C17.7626 8.92678 18.2374 8.92678 18.5303 9.21967C18.8232 9.51256 18.8232 9.98744 18.5303 10.2803L12.5303 16.2803C12.2374 16.5732 11.7626 16.5732 11.4697 16.2803L5.46967 10.2803C5.17678 9.98744 5.17678 9.51256 5.46967 9.21967Z\" fill=\"currentColor\"><\/path><\/svg><\/div>\n\t\t\n<\/div>\n\n<\/summary>\n<div class=\"elementor-element elementor-element-73bd740 e-con e-atomic-element e-accordion-item-content-base  \" data-id=\"73bd740\" data-element_type=\"e-accordion-item-content\" data-e-type=\"e-accordion-item-content\" data-interaction-id=\"73bd740\" data-e-type=\"e-accordion-item-content\" data-id=\"73bd740\">\n    \t\t<div class=\"elementor-element elementor-element-a127b4e elementor-widget elementor-widget-text-editor\" data-id=\"a127b4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>No. Customer data is not used to train Sovos or third-party AI models. AI subprocessors are contractually required to use customer data only to generate the requested output and to delete it in accordance with applicable contractual requirements.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/details>\n<details class=\"elementor-element elementor-element-2d6b08e e-con e-atomic-element e-accordion-item-base  e-2d6b08e-c206fb3 \" data-id=\"2d6b08e\" data-element_type=\"e-accordion-item\" data-e-type=\"e-accordion-item\" data-interaction-id=\"2d6b08e\" data-e-type=\"e-accordion-item\" data-id=\"2d6b08e\"  name=\"78a7c03\">\n    <summary class=\"elementor-element elementor-element-c1b5057 e-con e-atomic-element e-accordion-item-header-base  \" data-id=\"c1b5057\" data-element_type=\"e-accordion-item-header\" data-e-type=\"e-accordion-item-header\" data-interaction-id=\"c1b5057\" data-e-type=\"e-accordion-item-header\" data-id=\"c1b5057\">\n    <span class=\"elementor-element elementor-element-9bc9b6f e-con e-atomic-element e-accordion-item-title-base  \" data-id=\"9bc9b6f\" data-element_type=\"e-accordion-item-title\" data-e-type=\"e-accordion-item-title\" data-interaction-id=\"9bc9b6f\" data-e-type=\"e-accordion-item-title\" data-id=\"9bc9b6f\">\n    \t\t\t<span class=\"e-7058840-d583e55 e-paragraph-base e-default-span\" data-interaction-id=\"7058840\" data-e-type=\"widget\" data-id=\"7058840\"><strong>Does Sovos publish a subprocessor list?<\/strong><\/span>\n\t\t\n<\/span>\n<div class=\"elementor-element elementor-element-84406d0 e-con e-atomic-element e-accordion-item-icon-base  e-84406d0-4d589e2 \" data-id=\"84406d0\" data-element_type=\"e-accordion-item-icon\" data-e-type=\"e-accordion-item-icon\" data-interaction-id=\"84406d0\" aria-hidden=\"true\" data-e-type=\"e-accordion-item-icon\" data-id=\"84406d0\">\n    \t\t\t<div class=\"e-svg-base e-default-div\" data-interaction-id=\"13142fd\" data-e-type=\"widget\" data-id=\"13142fd\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width: 100%; height: 100%; overflow: unset;\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M5.46967 9.21967C5.76256 8.92678 6.23744 8.92678 6.53033 9.21967L12 14.6893L17.4697 9.21967C17.7626 8.92678 18.2374 8.92678 18.5303 9.21967C18.8232 9.51256 18.8232 9.98744 18.5303 10.2803L12.5303 16.2803C12.2374 16.5732 11.7626 16.5732 11.4697 16.2803L5.46967 10.2803C5.17678 9.98744 5.17678 9.51256 5.46967 9.21967Z\" fill=\"currentColor\"><\/path><\/svg><\/div>\n\t\t\n<\/div>\n\n<\/summary>\n<div class=\"elementor-element elementor-element-0e4934c e-con e-atomic-element e-accordion-item-content-base  \" data-id=\"0e4934c\" data-element_type=\"e-accordion-item-content\" data-e-type=\"e-accordion-item-content\" data-interaction-id=\"0e4934c\" data-e-type=\"e-accordion-item-content\" data-id=\"0e4934c\">\n    \t\t<div class=\"elementor-element elementor-element-1721f50 elementor-widget elementor-widget-text-editor\" data-id=\"1721f50\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Yes. The list is published and maintained under the Data Processing Agreement, and is updated when a subprocessor is added. Customers are notified of changes in accordance with the agreement.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/details>\n<details class=\"elementor-element elementor-element-681ae79 e-con e-atomic-element e-accordion-item-base  e-681ae79-91b395d \" data-id=\"681ae79\" data-element_type=\"e-accordion-item\" data-e-type=\"e-accordion-item\" data-interaction-id=\"681ae79\" data-e-type=\"e-accordion-item\" data-id=\"681ae79\"  name=\"78a7c03\">\n    <summary class=\"elementor-element elementor-element-d0abc50 e-con e-atomic-element e-accordion-item-header-base  \" data-id=\"d0abc50\" data-element_type=\"e-accordion-item-header\" data-e-type=\"e-accordion-item-header\" data-interaction-id=\"d0abc50\" data-e-type=\"e-accordion-item-header\" data-id=\"d0abc50\">\n    <span class=\"elementor-element elementor-element-2398338 e-con e-atomic-element e-accordion-item-title-base  \" data-id=\"2398338\" data-element_type=\"e-accordion-item-title\" data-e-type=\"e-accordion-item-title\" data-interaction-id=\"2398338\" data-e-type=\"e-accordion-item-title\" data-id=\"2398338\">\n    \t\t\t<span class=\"e-d50cc35-7ec9378 e-paragraph-base e-default-span\" data-interaction-id=\"d50cc35\" data-e-type=\"widget\" data-id=\"d50cc35\"><strong>What happens if data is processed outside our region?<\/strong><\/span>\n\t\t\n<\/span>\n<div class=\"elementor-element elementor-element-6f1fafd e-con e-atomic-element e-accordion-item-icon-base  e-6f1fafd-4c36214 \" data-id=\"6f1fafd\" data-element_type=\"e-accordion-item-icon\" data-e-type=\"e-accordion-item-icon\" data-interaction-id=\"6f1fafd\" aria-hidden=\"true\" data-e-type=\"e-accordion-item-icon\" data-id=\"6f1fafd\">\n    \t\t\t<div class=\"e-svg-base e-default-div\" data-interaction-id=\"344c16e\" data-e-type=\"widget\" data-id=\"344c16e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width: 100%; height: 100%; overflow: unset;\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M5.46967 9.21967C5.76256 8.92678 6.23744 8.92678 6.53033 9.21967L12 14.6893L17.4697 9.21967C17.7626 8.92678 18.2374 8.92678 18.5303 9.21967C18.8232 9.51256 18.8232 9.98744 18.5303 10.2803L12.5303 16.2803C12.2374 16.5732 11.7626 16.5732 11.4697 16.2803L5.46967 10.2803C5.17678 9.98744 5.17678 9.51256 5.46967 9.21967Z\" fill=\"currentColor\"><\/path><\/svg><\/div>\n\t\t\n<\/div>\n\n<\/summary>\n<div class=\"elementor-element elementor-element-7184ade e-con e-atomic-element e-accordion-item-content-base  \" data-id=\"7184ade\" data-element_type=\"e-accordion-item-content\" data-e-type=\"e-accordion-item-content\" data-interaction-id=\"7184ade\" data-e-type=\"e-accordion-item-content\" data-id=\"7184ade\">\n    \t\t<div class=\"elementor-element elementor-element-e8c859d elementor-widget elementor-widget-text-editor\" data-id=\"e8c859d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Access to customer protected information is restricted under the principle of least privilege, and where processing takes place in a third country Sovos uses Standard Contractual Clauses to provide an adequate level of protection.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/details>\n<details class=\"elementor-element elementor-element-c5307f2 e-con e-atomic-element e-accordion-item-base  e-c5307f2-4c7ddf0 \" data-id=\"c5307f2\" data-element_type=\"e-accordion-item\" data-e-type=\"e-accordion-item\" data-interaction-id=\"c5307f2\" data-e-type=\"e-accordion-item\" data-id=\"c5307f2\"  name=\"78a7c03\">\n    <summary class=\"elementor-element elementor-element-8455d91 e-con e-atomic-element e-accordion-item-header-base  \" data-id=\"8455d91\" data-element_type=\"e-accordion-item-header\" data-e-type=\"e-accordion-item-header\" data-interaction-id=\"8455d91\" data-e-type=\"e-accordion-item-header\" data-id=\"8455d91\">\n    <span class=\"elementor-element elementor-element-329ffb2 e-con e-atomic-element e-accordion-item-title-base  \" data-id=\"329ffb2\" data-element_type=\"e-accordion-item-title\" data-e-type=\"e-accordion-item-title\" data-interaction-id=\"329ffb2\" data-e-type=\"e-accordion-item-title\" data-id=\"329ffb2\">\n    \t\t\t<span class=\"e-3850132-c8f0807 e-paragraph-base e-default-span\" data-interaction-id=\"3850132\" data-e-type=\"widget\" data-id=\"3850132\"><strong>Can we see the underlying security documentation?<\/strong><\/span>\n\t\t\n<\/span>\n<div class=\"elementor-element elementor-element-9705685 e-con e-atomic-element e-accordion-item-icon-base  e-9705685-4c02446 \" data-id=\"9705685\" data-element_type=\"e-accordion-item-icon\" data-e-type=\"e-accordion-item-icon\" data-interaction-id=\"9705685\" aria-hidden=\"true\" data-e-type=\"e-accordion-item-icon\" data-id=\"9705685\">\n    \t\t\t<div class=\"e-svg-base e-default-div\" data-interaction-id=\"c350eef\" data-e-type=\"widget\" data-id=\"c350eef\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width: 100%; height: 100%; overflow: unset;\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M5.46967 9.21967C5.76256 8.92678 6.23744 8.92678 6.53033 9.21967L12 14.6893L17.4697 9.21967C17.7626 8.92678 18.2374 8.92678 18.5303 9.21967C18.8232 9.51256 18.8232 9.98744 18.5303 10.2803L12.5303 16.2803C12.2374 16.5732 11.7626 16.5732 11.4697 16.2803L5.46967 10.2803C5.17678 9.98744 5.17678 9.51256 5.46967 9.21967Z\" fill=\"currentColor\"><\/path><\/svg><\/div>\n\t\t\n<\/div>\n\n<\/summary>\n<div class=\"elementor-element elementor-element-80d01d5 e-con e-atomic-element e-accordion-item-content-base  \" data-id=\"80d01d5\" data-element_type=\"e-accordion-item-content\" data-e-type=\"e-accordion-item-content\" data-interaction-id=\"80d01d5\" data-e-type=\"e-accordion-item-content\" data-id=\"80d01d5\">\n    \t\t<div class=\"elementor-element elementor-element-3fd0543 elementor-widget elementor-widget-text-editor\" data-id=\"3fd0543\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Certifications and compliance documentation are published in the Sovos Trust Center. The Security Schedule and privacy policy are published on sovos.com. The risk assessment report, including outstanding risks and planned remediations, is available for review by a customer on request.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/details>\n<details class=\"elementor-element elementor-element-1e0f6d3 e-con e-atomic-element e-accordion-item-base  e-1e0f6d3-62614be \" data-id=\"1e0f6d3\" data-element_type=\"e-accordion-item\" data-e-type=\"e-accordion-item\" data-interaction-id=\"1e0f6d3\" data-e-type=\"e-accordion-item\" data-id=\"1e0f6d3\"  name=\"78a7c03\">\n    <summary class=\"elementor-element elementor-element-1d18e72 e-con e-atomic-element e-accordion-item-header-base  \" data-id=\"1d18e72\" data-element_type=\"e-accordion-item-header\" data-e-type=\"e-accordion-item-header\" data-interaction-id=\"1d18e72\" data-e-type=\"e-accordion-item-header\" data-id=\"1d18e72\">\n    <span class=\"elementor-element elementor-element-9acb121 e-con e-atomic-element e-accordion-item-title-base  \" data-id=\"9acb121\" data-element_type=\"e-accordion-item-title\" data-e-type=\"e-accordion-item-title\" data-interaction-id=\"9acb121\" data-e-type=\"e-accordion-item-title\" data-id=\"9acb121\">\n    \t\t\t<span class=\"e-0d583bf-0e6c8c5 e-paragraph-base e-default-span\" data-interaction-id=\"0d583bf\" data-e-type=\"widget\" data-id=\"0d583bf\"><strong>How often is the security program reviewed?<\/strong><\/span>\n\t\t\n<\/span>\n<div class=\"elementor-element elementor-element-88944f9 e-con e-atomic-element e-accordion-item-icon-base  e-88944f9-f67ec36 \" data-id=\"88944f9\" data-element_type=\"e-accordion-item-icon\" data-e-type=\"e-accordion-item-icon\" data-interaction-id=\"88944f9\" aria-hidden=\"true\" data-e-type=\"e-accordion-item-icon\" data-id=\"88944f9\">\n    \t\t\t<div class=\"e-svg-base e-default-div\" data-interaction-id=\"7ecdd04\" data-e-type=\"widget\" data-id=\"7ecdd04\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width: 100%; height: 100%; overflow: unset;\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M5.46967 9.21967C5.76256 8.92678 6.23744 8.92678 6.53033 9.21967L12 14.6893L17.4697 9.21967C17.7626 8.92678 18.2374 8.92678 18.5303 9.21967C18.8232 9.51256 18.8232 9.98744 18.5303 10.2803L12.5303 16.2803C12.2374 16.5732 11.7626 16.5732 11.4697 16.2803L5.46967 10.2803C5.17678 9.98744 5.17678 9.51256 5.46967 9.21967Z\" fill=\"currentColor\"><\/path><\/svg><\/div>\n\t\t\n<\/div>\n\n<\/summary>\n<div class=\"elementor-element elementor-element-23feb36 e-con e-atomic-element e-accordion-item-content-base  \" data-id=\"23feb36\" data-element_type=\"e-accordion-item-content\" data-e-type=\"e-accordion-item-content\" data-interaction-id=\"23feb36\" data-e-type=\"e-accordion-item-content\" data-id=\"23feb36\">\n    \t\t<div class=\"elementor-element elementor-element-49041db elementor-widget elementor-widget-text-editor\" data-id=\"49041db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The information security policy is reviewed at planned intervals not exceeding one year, or sooner where significant changes occur. A risk assessment is performed at least annually.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/details>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-ecfabbf e-con e-atomic-element e-flexbox-base e-default-div e-ecfabbf-2fec7dd \" data-id=\"ecfabbf\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"ecfabbf\" data-e-type=\"e-flexbox\" data-id=\"ecfabbf\">\n    \t\t<div class=\"elementor-element elementor-element-60e8f90 elementor-widget elementor-widget-heading\" data-id=\"60e8f90\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Related pages<\/h2>\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7082bfc e-con-full e-flex e-con e-parent\" data-id=\"7082bfc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-84385f6 e-flex e-con-boxed e-con e-child\" data-id=\"84385f6\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-39a45ae elementor-widget elementor-widget-button\" data-id=\"39a45ae\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/taxapedia\/about\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">About Sovos<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-894f30c e-flex e-con-boxed e-con e-child\" data-id=\"894f30c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-db684b7 elementor-widget elementor-widget-button\" data-id=\"db684b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/taxapedia\/about\/agentic-tax-compliance-platform\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">The Agentic Compliant Finance (ACF) Platform<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f81c475 e-flex e-con-boxed e-con e-child\" data-id=\"f81c475\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-df33a7f elementor-widget elementor-widget-button\" data-id=\"df33a7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/taxapedia\/ai\/ai-in-tax-compliance-explained\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">What is AI in tax compliance?<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c0b3a37 e-con-full e-flex e-con e-parent\" data-id=\"c0b3a37\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-e6f2362 e-flex e-con-boxed e-con e-child\" data-id=\"e6f2362\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5c729c2 elementor-widget elementor-widget-button\" data-id=\"5c729c2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/taxapedia\/solutions\/digital-trust\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">How do you verify customer identity and sign contracts with legal validity?<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-23849cb e-flex e-con-boxed e-con e-child\" data-id=\"23849cb\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dbbc9ee elementor-widget elementor-widget-button\" data-id=\"dbbc9ee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/taxapedia\/about\/global-coverage\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Sovos global coverage by country and region<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1a34d7d e-con-full e-flex e-con e-child\" data-id=\"1a34d7d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Home\/ Wp Admin\/ Admin Ajax.php How does Sovos secure and govern customer data? Sovos operates an information security program certified to ISO 27001:2022, with SOC 2, and compliance with GDPR, CCPA and eIDAS. Certifications, policies and supporting documentation are published in the Sovos Trust Center. Customer data is not used to train Sovos or third-party&hellip;<\/p>\n","protected":false},"author":6,"featured_media":0,"parent":25,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-71","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/pages\/71","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/comments?post=71"}],"version-history":[{"count":0,"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/pages\/71\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/pages\/25"}],"wp:attachment":[{"href":"https:\/\/sovos.com\/taxapedia\/wp-json\/wp\/v2\/media?parent=71"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}