Certified security for industry leaders

The Trusted Information Security Assessment Exchange (TISAX) is a standardized information security model for the automotive industry, created by the German Association of the Automotive Industry (VDA) and the European Network Exchange (ENX). TISAX assessments, conducted by accredited auditors, evaluate organizations' information security management systems (ISMS) based on the VDA Information Security Assessment (ISA) catalog, aligned with ISO/IEC 27001. Results are shared on the TISAX platform, allowing automotive supply chain participants to verify compliance.

ISO/IEC 27001 is a global standard for managing information security, detailing requirements for establishing, maintaining, and improving an Information Security Management System (ISMS). Certification involves implementing security measures, undergoing audits, and ensuring continuous improvement. The certification attests that companies comply with best practices to secure various types of information like financial information, intellectual property, employee details, or any other information entrusted from third parties.

GDPR (General Data Protection Regulation) is an EU regulation protecting personal data and privacy of EU and EEA (European Economic Area) citizens. It sets strict rules for collecting, processing, storing, and transfering personal data and gives individuals more control over their data. Non-compliance can lead to hefty fines. At SPREAD, we comply fully with GDPR and regularly audit our processes to ensure ongoing compliance.