Oxylabs Receives ISO/IEC 27001 Certification

Enrika Pavlovskytė

2023-12-222 min read

We have recently certified our Information Security Management System according to the ISO/IEC 27001:2017 standard, showing proof of the quality of our services and fueling our commitment to excellence.

What’s an ISO/IEC 27001 certificate?

Developed by ISO and IEC, ISO 27001 is an industry-leading standard that helps businesses implement, manage, and improve their ISMS (Information Security Management System). Companies adhering to its requirements ensure they handle data securely and protect it against possible threats.

What are ISO and IEC?

ISO and IEC are both international organizations that develop and publish standards. ISO, otherwise known as the International Organization for Standardization, delivers standards for various fields, whereas IEC (International Electrotechnical Commission) focuses on the field of technology. Ultimately, both strive to promote quality and consistency in their respective spheres.

ISO/IEC 27001 covers various kinds of information — from business to personal data — and how it is stored (digital and physical copies or third-party suppliers). It also plays a normative role, defining specific requirements an ISMS must meet to be certified. These requirements are as rigorous as they are numerous, but they all follow three core principles:

Confidentiality: Only authorized people can access information.
Information integrity: The organization protects data from erasure or damage.
Availability of data: Data is always available to authorized persons.

So, the certificate focuses on more than just software and hardware — it also addresses policies, workflows, and people.

Excellence in security and innovation

Organizations can choose to become ISO/IEC 27001 compliant or certified. Compliance means the company follows the standard's good practices but has not been formally assessed. However, to become certified, they must undergo months of preparation, concluding in a thorough audit performed by a certification body. For a growing company like Oxylabs, which operates within the web data field, getting the ISO/IEC 27001 certification was an important step.

Innovation is one of our core values, but leading the market with cutting-edge solutions demands a secure foundation. This certification gave us a much-welcomed chance to take stock of our data security strengths and weaknesses, secure vulnerabilities, and improve cyber resilience. Most importantly, it positions us as reliable business partners, delivering solutions to our customers with security, trust, and excellence.

What areas of Oxylabs are certified?

The ISO/IEC 27001:2017 certification covers the main Oxylabs areas of business that are certified for Information Security Management Systems. More specifically, the following products are included:

✓ Residential Proxies, Mobile Proxies, Rotating ISP Proxies

✓ Shared DC, Dedicated DC, Static Residential Proxies

✓ SERP Scraper API, E-Commerce Scraper API, Web Scraper API

What’s next?

While obtaining the ISO/IEC 27001 certification is a significant milestone, the process also highlights the importance of continually enhancing our ISMS to match the market shifts. As such, we will be undergoing a recertification process to align with the revised version of the standard (ISO/IEC 27001:2022) by the end of 2025. Ultimately, we want to build resilience against security threats so our clients and partners can confidently rely on us.

About the author

Enrika Pavlovskytė

Copywriter

Enrika Pavlovskytė is a Copywriter at Oxylabs. With a background in digital heritage research, she became increasingly fascinated with innovative technologies and started transitioning into the tech world. On her days off, you might find her camping in the wilderness and, perhaps, trying to befriend a fox! Even so, she would never pass up a chance to binge-watch old horror movies on the couch.

Learn more about Enrika Pavlovskytė

All information on Oxylabs Blog is provided on an "as is" basis and for informational purposes only. We make no representation and disclaim all liability with respect to your use of any information contained on Oxylabs Blog or any third-party websites that may be linked therein. Before engaging in scraping activities of any kind you should consult your legal advisors and carefully read the particular website's terms of service or receive a scraping license.