Blog

Building on Our Security Promise: ISO 27001:2022, GDPR, and SOC 2 Type II

Building on Our Security Promise: ISO 27001:2022, GDPR, and SOC 2 Type II

Written by

Naman Mathur

Published on

August 25, 2025

When we first published Security Is the Product, just three short months before, we made a simple point: trust isn’t an add-on feature. It has to be designed into every layer of Stacks. Since then, we’ve been hard at work strengthening that foundation.

Today, we’re excited to share three major milestones that deepen our security commitment:

ISO/IEC 27001:2022 Certification

We’ve achieved certification in the latest ISO 27001 standard for information security management systems. This upgrade reflects modern requirements for cyber resilience, risk management, and governance, ensuring we meet the highest global benchmarks.

GDPR Compliance

Stacks now fully complies with the General Data Protection Regulation (GDPR), reinforcing our promise to handle all customer data with transparency, privacy, and user rights at the center.

SOC 2 Type II Certification

We’ve advanced from SOC 2 Type I to SOC 2 Type II. Unlike a point-in-time review, Type II demonstrates that our security, availability, and privacy controls are consistently operating effectively over time. This gives customers stronger assurance that our practices aren’t just designed well, but executed reliably day in and day out.

Why This Matters

  • Trust, Verified: These certifications aren’t just badges. They’re proof points that our systems meet rigorous standards recognized globally.

  • Continuous Assurance: From startups to enterprises, our customers now benefit from security controls validated not just once, but continuously over time.

  • Privacy by Design: GDPR compliance ensures privacy is baked into how we build and operate, not something added after the fact.

Explore the Trust Center

We’ve built a [Trust Center] where you can see details on these certifications and our ongoing security posture. It’s your one-stop resource for understanding how we keep your data safe.

Security has always been the product. These milestones make that promise stronger than ever.

Update to Our Original Blog

We’ve also added a note at the top of Security Is the Product linking to this post, so readers always see the latest updates in our security journey. Read the full article.

GET DEMO

See how Stacks works.

We'd love to show you how Stacks can help save days by automating your month-end close.

Trusted by fast-growing companies including:

“Since using Stacks, we've reduced the time to financial close by three and a half days, which is material in our case. And more importantly, we've been able to utilize our resources more effectively.”

Ruben A.

CFO at Juni

GET DEMO

See how Stacks works.

We'd love to show you how Stacks can help save days by automating your month-end close.

Trusted by fast-growing companies including:

“Since using Stacks, we've reduced the time to financial close by three and a half days, which is material in our case. And more importantly, we've been able to utilize our resources more effectively.”

Ruben A.

CFO at Juni

GET DEMO

See how Stacks works.

We'd love to show you how Stacks can help save days by automating your month-end close.

Trusted by fast-growing companies including:

“Since using Stacks, we've reduced the time to financial close by three and a half days, which is material in our case. And more importantly, we've been able to utilize our resources more effectively.”

Ruben A.

CFO at Juni