Security Center

Start your security review
View & download sensitive information
Ask for information
ControlK

Effectory information security and privacy measures are designed and implemented to protect the personal data of employees of customers, and survey results of customers.

Effectory is ISO 27001 and ISO 27701 certified for the above scope. Effectory is SOC 2 Type 2 audited successfully. A standardized vendor questionnaire according to CSA CAIQ is also available. A comprehensive whitepaper is available explaining in much more detail all Effectory technical and organizational measures to protect customer data. Below the documents, a selection of Effectory technical and organizational measures are explained at high-level.

Access to all these documents can be requested via this site using the provided buttons. It is also possible to optionally subscribe to updates of this page, including when new certificates or other documents are available. If you choose not to use this site, then please ask your Effectory sales consultant or Effectory customer success manager directly to obtain the desired documentation.

Mediq Nederland-company-logoMediq Nederland
London Luton Airport-company-logoLondon Luton Airport
ALDI Nederland-company-logoALDI Nederland
Jumbo Supermarkten-company-logoJumbo Supermarkten
bol.com-company-logobol.com
Protime-company-logoProtime
ANWB-company-logoANWB
Quoniam Asset Management-company-logoQuoniam Asset Management
Menzis-company-logoMenzis
SFS Group-company-logoSFS Group
Hogeschool Utrecht-company-logoHogeschool Utrecht
Achmea-company-logoAchmea
Rijnstate-company-logoRijnstate
Noordwest Ziekenhuisgroep-company-logoNoordwest Ziekenhuisgroep
BDO Nederland-company-logoBDO Nederland
Gerresheimer AG-company-logoGerresheimer AG
Royal FloraHolland-company-logoRoyal FloraHolland
Tony's Chocolonely-company-logoTony's Chocolonely

Documents

Featured Documents

COMPLIANCEISO/IEC 27001:2022
Security Center Updates

Effectory successfully completes SOC 2 Type II audit for 2025

Copy link
General

Effectory has successfully completed its SOC 2 Type II audit for 2025. This independent assessment, conducted by registered auditors, evaluated the design, existence, and operating effectiveness of Effectory’s technological and organizational controls for safeguarding customer data and personal data.

The audit covered the period from January 1 to September 30, 2025. The auditors concluded that Effectory’s controls are suitably designed and operate effectively to meet the SOC 2 Type II requirements for security and privacy. The full SOC 2 Type II report is available for download on this website.

Effectory platform successfully passes independent penetration test 2025

General

Recently a penetration test was conducted on the My Effectory platform. This assessment was conducted by a certified third-party security firm to evaluate Effectory platform’s resilience against potential cyber threats.

The results confirmed that Effectory’s security measures are effective in protecting customer data and maintaining the integrity of the platform. This successful outcome reinforces our ongoing commitment to safeguarding our customers’ information and continuously improving our security posture.

The full penetration test summary report is available for download on this website.

Effectory achieved FSQS-NL certified status

General

Effectory achieved the status of a certified supplier under FSQS-NL requirements (Financial Services Qualification System). FSQS is a community of financial institutions including banks, building societies, insurance companies and investment services, collaborating to agree a single standard for managing the increasing complexity of third and fourth-party information needed to demonstrate compliance to regulators, policies and governance controls.

Effectory achieved SOC 2 Type II for 2024

General

Effectory recently the SOC 2 Type II audit for 2024. This means independent register auditors examined the Effectory technological and organizational controls for protecting customer data. The auditors' findings are that these controls are adequate for the data protection scope. Furthermore, the design, existence, and operating effectiveness of these controls are assessed with positive outcome during January 1, 2024, until September 30, 2024. The report can be downloaded on this site.

Effectory achieved SOC 2 Type II for 2023

General

Effectory recently completed a SOC 2 Type II audit. This means independent, accredited auditors examined the Effectory technological and organizational controls for protecting customer data. The auditors' findings are that these controls are adequate for the data protection scope. Furthermore, the design, existence, and operating effectiveness of these controls are assessed with positive outcome during January 1, 2023, until September 30, 2023. The report can be downloaded on this site.

Built onSafeBase by Drata Logo