security & privacy,without compromise.
Searce is built on a foundation of transparency. Here you'll find everything you need to evaluate our security posture, compliance certifications, and data handling practices.
Compliance Status
- certifiedISO/IEC 27001:2022Information Security Management System
- certifiedSOC 2 Type 2Security, Availability & Confidentiality
- certifiedPDPL (KSA)Personal Data Protection Law — Saudi Arabia
- in alignmentDPDP Act (India)Digital Personal Data Protection Act
- in progressISO/IEC 42001AI Management System
report a security vulnerability
Discovered a security issue? We take all reports seriously and respond within 24 hours.
certifications & audits
Our compliance program is independently verified and continuously maintained to meet the highest international standards.
ISO/IEC 27001:2022
Searce's Information Security Management System (ISMS) is independently audited and certified by an accredited certification body.
- Covers all core security domains
- Annually reviewed via PDCA cycle
- Certificate available under NDA
SOC 2 Type 2
Searce is SOC 2 Type 2 certified, covering Security, Availability, and Confidentiality Trust Services Criteria, independently audited by a licensed CPA firm.
- Covers Security, Availability & Confidentiality
- Conducted by independent CPA firm
- Report available under NDA
ISO/IEC 42001
Searce has initiated certification under ISO/IEC 42001, the international standard for AI Management Systems, reflecting our commitment to responsible AI governance.
- Covers AI risk management & governance
- Aligned with responsible AI principles
- Certification in progress
PDPL — KSA
Searce is certified under Saudi Arabia's Personal Data Protection Law, ensuring compliant handling of personal data for KSA-based operations.
- Data subject rights supported
- DPIA conducted for high-risk processing
- Dedicated Data Privacy Officer in place
security controls & tools
A layered security architecture covering network, endpoint, identity, cloud, and data protection.
Tools & Platforms
The technology stack powering our security operations.
Next-Gen Cloud Firewall
EDR / XDR / SIEM
MDM
Collaboration Suite
FIDO2 / Passkeys
Full Disk Encryption
ITSM
Wi-Fi Network Security
Security Controls
Policies, processes and configurations that govern how we protect data and systems.
Access Control
Role-based access control (RBAC), least-privilege enforcement, MFA across all systems, and periodic access reviews with immediate revocation upon exit.
Encryption
AES-256 encryption at rest across all devices and Google Drive. TLS 1.2+ enforced for all data in transit via Google Workspace.
Patch Management
Semi-automated patching via MDM platforms for macOS and Windows. Critical patches deployed within 24–48 hours of release.
Vulnerability Management
Periodic vulnerability scanning, risk-based prioritization, and verified remediation tracked to closure under our ISMS.
Secure Development
SDLC policy covering secure coding, code reviews, SAST scanning, and strict environment segregation. No production data used in dev or test.
Physical Security
Access badge controls, CCTV surveillance, visitor management, and zone-based access restrictions across all Searce facilities.
data protection & privacy
Searce does not store or process client data independently. All data resides in the client's own environment, and our privacy controls govern how we handle internal and operational data.
Data Privacy Officer
Searce has a designated Data Privacy Officer (DPO) responsible for overseeing data protection policies, DPIA processes, and regulatory compliance.
Data Classification
All data is classified across four levels — Public, Internal, Confidential, and Restricted — with handling procedures defined for each tier.
Privacy Impact Assessments
DPIAs are conducted for all high-risk data processing activities, in alignment with PDPL (KSA) requirements.
Data Deletion
Controls are in place to fulfill data deletion and erasure requests. Retention schedules are defined and enforced under our Information Security Policy.
security & privacy policies
Key policies governing Searce's security and privacy practices, reviewed annually by the CISO.
request security documentation
Need our ISO certificate, SOC 2 report, penetration test summary, or answers to a security questionnaire? We'll get back to you within one business day.