CaféX News: Compliance and Security Update

By Rob Hill - Oct. 11, 2018


Here is a quick update on CafeX’s security and compliance initiatives.

It has been a busy few months preparing for GDPR and ISO 2700 certification. May 25th, 2018 seems a long time ago, but our efforts to ensure we were ready for the GDPR review have been successful. We updated a few internal processes along with our privacy policies, but it was great to see that the hard work had already been done for the most part.

We successfully completed our Stage 2 audit by British Standards Institute (BSI) in September and have been been certified. We had 7 days of intense auditing from BSI onsite in Cardiff, UK. The final result was 3 minor non-conformities that have all now been resolved.  iso27k, Tick! SOC2 underway....  

Our US office audit is scheduled for November 2018, which will complete the entire process.

Keeping our customers’ information safe and confidential is of utmost importance to us, and this certification demonstrates our commitment to maintaining a high standard for information security management throughout our organization.

CafeX is now undertaking SOC2 Type 2 certification for all of our software-as-a-service (SaaS) products. The kickoff for this happened in late September, and we hope to achieve full certification by March, 2019.

Information on our compliance is available on our dedicated Security and Compliance site:

If you have any questions around our Information Security programs, please contact