aytm is ISO/IEC 27001 certified. ISO 27001 is one of the most widely recognized international standards for information security. It requires aytm to run a formal information security management system (ISMS) that brings information security under explicit management control and is audited regularly by an independent certification body.
This article explains what the certification covers, how aytm keeps it current, and how to download a copy of the certificate for your security or procurement review.
In This Article
- What Is ISO 27001?
- What the Certification Covers
- How aytm Stays Certified
- aytm's Other ISO Certifications
- Getting a Copy of the Certificate
What Is ISO 27001?
ISO/IEC 27001 is published jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It sets out what an organization needs in order to identify information security risks, put controls in place to manage them, and keep improving those controls over time.
The certification matters for clients because it means:
- Security is managed, not improvised—risks are identified, assessed, and handled through a documented management system rather than case by case.
- Risks are handled cost-effectively—controls are matched to the actual level of risk.
- The program is independently verified—an accredited third party audits it, so aytm isn't the only one vouching for its own controls.
- The system keeps improving—ISO 27001 requires continuous monitoring, review, and maintenance of the ISMS.
One of aytm's most important goals is to give clients confidence in how they work with the platform, and this certification is a key part of that.
What the Certification Covers
aytm first earned ISO 27001 certification in 2017, making it one of the first market research platforms to do so. The certification covers the ISMS that supports both the aytm platform and aytm's proprietary panel, PaidViewpoint.
All customer-facing business processes and services are within the scope of the ISMS, including:
- Survey questionnaire development
- Survey application development
- Survey deployment
- Survey data collection
- Survey analytics
- Contracted survey creation, management, analysis, and reporting
- Survey respondents' personal information
- Survey respondents' responses to surveys
The scope covers aytm client information as well as the personal information and responses of respondents, whether they come from PaidViewpoint or from third-party panel partners.
How aytm Stays Certified
ISO 27001 certification has to be maintained. aytm and PaidViewpoint run a formal, ongoing program of audits against the standard, carried out by independent third-party certification bodies accredited by the ANSI National Accreditation Board (ANAB). The certification is renewed through periodic recertification audits, with surveillance audits in between.
Day to day, aytm's Information Management System (IMS) Committee runs the program. Its framework reaches every team, from how contracts are written to how software is developed and released.
aytm's Other ISO Certifications
ISO 27001 is one of four ISO certifications aytm holds. Together they cover security, privacy, AI, and research quality:
| Standard | What It Covers |
|---|---|
| ISO/IEC 27001 | Information security management: how aytm protects the information it handles. |
| ISO/IEC 27701 | Privacy information management: an extension of ISO 27001 that covers how personal information is governed and how the rights of the people behind the data are respected. |
| ISO/IEC 42001 | AI management: how aytm develops and uses AI, including Skipper, with governance and risk management. |
| ISO 20252 | Market, opinion, and social research: quality and process standards for research projects, sample management, and data handling. |
Getting a Copy of the Certificate
You can download aytm's current ISO 27001 certificate, along with the ISO 27701, ISO 42001, and ISO 20252 certificates, from the aytm Security & Compliance page. No request is needed.
⚠️ Note: The certificates are issued to Umongous, Inc., aytm's legal entity. If your vendor records list aytm under a different name, that's the name to match.
If you need a copy sent to you directly, or have other security or compliance documentation needs for a vendor review, contact support@aytm.com.