Certifications

Persefoni maintains an ISO 27001 certification which provides external auditor validation that an effective Information Security Management System (ISMS) has been established to identify and manage information risks through a comprehensive set of company-wide processes and security controls, including processes and controls that continually improve the ISMS.

To access our ISO 27001 certification, please enter our registrant name “Persefoni AI” in the link here. 

Persefoni maintains an ISO 27017 certification that provides external auditor validation that Persefoni's ISMS includes security controls for the secure management of Persefoni's cloud infrastructure as well as cloud service security for users of the Persefoni CMAP.

To access our ISO 27017 certification, please enter our registrant name, “Persefoni AI” in the link here.
‍Note: ISO 27017 is an extension of the ISO 27001 framework, and as such, Persefoni's ISO 27017 certification is included in Persefoni's ISO 27001 certificate.

The service organization control (SOC) 1 Type II report provides an external auditor’s attestation that Persefoni maintained appropriate controls around the Climate Management and Accounting Platform (CMAP) for customer financial reporting purposes (specific to carbon accounting). Persefoni received a clean, unqualified audit report with no exceptions.

The service organization control (SOC) 2 Type II report provides an external auditor’s attestation that Persefoni's security controls were in place and effective for the report’s coverage period as related to the American Institute of Certified Public Accountant's (AICPA) trust service principles. Persefoni was audited against the Security, Availability, and Confidentiality trust service principles and received a clean, unqualified audit report with no exceptions.

SOCOTEC International Certification verifies that our platform calculates emissions correctly based on the PCAF Standard.

Persefoni is a proud member of the Cloud Security Alliance (CSA), an organization dedicated to enhancing the security of cloud computing. To demonstrate Persefoni’s commitment to security, Persefoni's security controls include scope for CSA’s Consensus Assessment Initiative Questionnaire (CAIQ) which have been certified as STAR Level 2 by an external auditor. Persefoni’s CSA certifications and related CAIQ responses are available for review in the CSA STAR registry here.

To access our CSA STAR certification and CAIQ, please navigate the CSA registry via this link here and search for Persefoni AI.

TÜV Rheinland stands for safety and quality in virtually all areas of business and life. Founded almost 150 years ago, the company is one of the world’s leading, independent testing service providers; they rigorously validate that solutions, processes, and services comply with international standards. As such, TÜV Rheinland is a global trademark of trust and verification.

The NIST Cybersecurity Framework (NIST CSF) provides guidance on how to manage and reduce IT infrastructure security risk. Persefoni has adopted the NIST Cybersecurity Framework to cornerstone the development and maturing of our security organization, processes, and procedures.