Security & Compliance: ISO 27001, GDPR and Data Protection

Security & Compliance: ISO 27001, GDPR and Data Protection

EvaluationsHub is built with enterprise-grade security and compliance as a foundation, not an afterthought – independently audited, encrypted end-to-end, and hosted entirely within the EU.

Certifications & standards

  • ISO 27001 Certified – Stage 2 complete. Independently audited information security management. Certificate available on request.
  • GDPR Compliant – data hosted on AWS EU-West, encrypted at rest and in transit. Your data never leaves Europe. A Data Processing Agreement (DPA) is available on request.
  • Official SAP Partner – listed in the SAP App Center with a certified, tested, production-ready native connector.
  • 4.9 / 5 on G2 – rated by procurement teams across chemicals, manufacturing, pharma and professional services.

Roles and permissions

Access to data is controlled through granular, role-based access control (RBAC):

  • Role-based access control (RBAC) for all users – category manager, quality lead, AP specialist, legal, executive, and more
  • Clean segregation of duties for governance review
  • 2FA enforced for all user accounts
  • Every action timestamped and role-attributed in an immutable audit trail

GDPR & encryption

  • State-of-the-art encryption for data security and confidentiality
  • Data hosted on AWS EU-West – never leaves Europe
  • Encrypted at rest and in transit
  • Rigorous adherence to GDPR and other regulatory requirements
  • DPA available on request

Certification vault & risk register

Beyond platform security, EvaluationsHub helps you manage supplier-side compliance:

  • Certification vault for supplier documents – ISO, REACH, GMP, SOC and more
  • Risk register with scores per category
  • Real-time alerts on expiring certifications
  • CSRD-aligned ESG questionnaires ready out of the box

Audit trail & governance

  • Immutable audit trail – every action timestamped and logged, across scorecards, CAPA, contracts and risk
  • PDF and Excel export for all reports and scorecards – ready for board packs and external audits
  • Full CAPA and AI decision audit logs, exportable

Enterprise-tier security features

Available from the Enterprise plan (500+ suppliers):

  • SSO / SAML – Okta, Azure AD, Google Workspace
  • Multi-entity and multi-site management with governance controls

FAQ

Is my data stored in Europe? Yes. All data is on AWS EU-West, encrypted at rest and in transit. EvaluationsHub is ISO 27001 certified and GDPR compliant. A DPA is available on request.

Is EvaluationsHub independently audited? Yes – ISO 27001 Stage 2 is complete. The certificate is available on request.

Where can I find more detail? See the Trust Center for full compliance documentation.

Source: evaluationshub.com/data-security-and-compliance and evaluationshub.com/pricing

    • Related Articles

    • Security Measures in EvaluationsHub: Protecting Your Data & Workflows

      At EvaluationsHub, security is a top priority and not an option for only enterprise customers. It is included for all customers. As a platform designed to manage sensitive evaluation processes between businesses, we implement enterprise-grade ...

    • Why Can’t I Sign Up with My Email?

      Troubleshooting: Why Can’t I Sign Up with My Email? If you’re experiencing issues signing up or logging into EvaluationsHub, it may be due to the type of email address you’re using. EvaluationsHub only allows business email addresses We do not ...

    • What Is EvaluationsHub? A Quick Overview

      What Is EvaluationsHub? A Deep Dive Overview Managing supplier and customer relationships today requires more than occasional scorecards or one-off surveys. Organizations face increasing pressure to ensure that their partners meet performance ...

    • Understanding EvaluationsHub Pricing

      EvaluationsHub offers flexible, scalable pricing designed to fit businesses of all sizes: Pay as you go. Our pricing model ensures you only pay for the business units/accounts you manage, while invited external users can participate for free. There ...

    • You've Been Invited to EvaluationsHub – Here's What You Need to Know

      Getting Started with EvaluationsHub: Your Invitation & What to Expect Welcome to EvaluationsHub! You’re here because either: ✅ A colleague invited you to collaborate on internal evaluations (Internal Account) ✅ A supplier or customer added you to ...