Data Security & Privacy

Putting security and data protection first

At Veratrak, we understand the critical importance of trust in the pharmaceutical supply chain. As a software company dedicated to enhancing the efficiency and security of the pharma industry, we prioritise the protection and confidentiality of your data. Our commitment to maintaining the highest standards of compliance, privacy, and security is paramount. This page outlines our key practices and certifications that ensure your data is in safe hands.

 

031-certificate

Compliance

Veratrak is proud to be ISO 27001:2017 and ISO 9001:2015 certified. These internationally recognised standards are a testament to our robust management systems, auditing schedules, and our commitment to quality and information security.

security

Security

At Veratrak, we employ a multi-layered approach to security, ensuring that your data is protected at every level. Our security standards and controls are consistently monitored and audited to ensure protection of data.

023-privacy

Privacy

Your privacy is our priority. We adhere to stringent data protection protocols to ensure that your personal and sensitive information is handled with the highest level of care.

Advanced Security Measures

Advanced Security Measures

We use security technologies to protect against threats and vulnerabilities.

We implement encryption, secure access controls, and regular security assessments to maintain the integrity of your data.

Continuous Monitoring

Continuous Monitoring 

We continuously monitor our systems for any signs of security breaches or vulnerabilities.

Our dedicated security team works around the clock to detect and respond to any potential threats.

Employee Training

Employee Training

Our employees undergo regular training on best security practices, secure coding, the latest threats, and quality management, ensuring they are equipped to protect your data effectively and respond effectively to any security incidents.

Procedures and controls

Procedures and controls

We have numerous polices and procedures in place that ensure handling and access of data is secure.

Our controlled documents have regular review cycles to keep them relevant and our employees familiar with them.

Data Protection

Data Protection 

We comply with all relevant data protection regulations, including GDPR. Our policies and procedures are designed to safeguard your data against unauthorised access, disclosure, alteration, and destruction. We regularly audit our data safeguards, personal data maps, and conduct DPIAs.

Transparency

Transparency

We maintain transparency about our data handling practices and security controls.

Our Privacy Policy clearly outlines how we collect, use, and protect your information. Please see our Trust Centre for a live feed of our security controls.

Risk Management

Risk Management

Our risk management framework identifies, assesses, and mitigates potential risks to our systems and data.

By continuously evaluating our risk landscape and enforcing risk and security gates in our SDLC, we can implement effective controls and strategies to protect against threats..

Continuous Improvement

Continuous Improvement

We are dedicated to continuous improvement in all aspects of our operations.

By regularly reviewing and updating our security practices and compliance measures, we strive to maintain the highest level of trust and reliability.

Visit our Trust Centre

As a further commitment to our security and transparency, we have provided a public feed to our security and privacy controls. Our Trust Centre is linked directly with the tools we use to monitor, maintain, and audit our security, quality and privacy management systems.

In our Trust Centre you will find details of:

- All the active controls we have in place for security, quality, and privacy
- Our ISO certifications
- Details of the data we collect
- A list of our sub-processors
- FAQs
- Compliance updates
ISO 27001:2017
Information Security Management

ISO 27001

We are certified to the ISO 27001:2017 standard by the British Assessment Bureau, an organisation accredited by UKAS. This certification demonstrates our commitment to maintaining a robust Information Security Management System (ISMS). ISO 27001:2017 is an internationally recognised standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an ISMS. This certification assures our clients that we have a systematic and risk-based approach to managing sensitive company and customer information.

Key Benefits:

  • Ensures the protection of your data's confidentiality, integrity, and availability.
  • Identifies and mitigates information security risks.
  • Emphasises continuous improvement of our information security practices.
  • Ensures compliance with relevant laws and regulations.
ISO 9001:2015
Quality Management

ISO 9001

Our commitment to quality is demonstrated through our certification to the ISO 9001:2015 standard by the British Assessment Bureau, a UKAS-accredited organisation. ISO 9001:2015 is the world’s most recognised Quality Management System (QMS) standard. It provides a framework and set of principles that ensure a common-sense approach to the management of our organisation to consistently satisfy customers and other stakeholders.

Key Benefits:

  • Focuses on meeting customer requirements and enhancing satisfaction.
  • Encourages the use of process approaches and risk-based thinking.
  • Ensures the delivery of consistent and high-quality products and services.
  • Helps in complying with statutory and regulatory requirements.
Certified by British Assessment Bureau
Quality Management

British Bureau logo

Both of our certifications, ISO 27001:2017 and ISO 9001:2015, are awarded by the British Assessment Bureau, which is accredited by the United Kingdom Accreditation Service (UKAS). UKAS accreditation is a mark of quality and reliability, ensuring that the certification body itself meets rigorous standards. In short, UKAS ‘check the checkers’.

Why It Matters:

  • Provides independent verification of our adherence to international standards.
  • Enhances our credibility that our certifications are trustworthy and adhere to the best standards.
  • Recognised globally as a mark of excellence and reliability.

Read more about our ISO certifications

Veratrak achieves ISO 9001:2015 certification

Veratrak, an award-winning UK based supply chain software provider, has successfully completed the ISO 9001:2015 Quality Management System certificati...

Veratrak is now ISO/IEC 27001 certified

January 16, 2023 - Veratrak, a UK based life sciences supply chain software company, has achieved widely recognised ISO/IEC 27001 security standard ce...