Decorative map grid pattern for the CleverMaps GeoDecision Platform product security

SECURITY & TRUST · 50.1033, 14.4458

Built for the highest
security standards

Built on recognised security and compliance frameworks, with controls your IT, security and procurement teams can verify before they buy

ISO 27001

SOC 2

AWS · EU HOSTING

GDPR-ALIGNED

SECURITY AT A GLANCE

What a security review needs to know first

The controls most reviewers ask about, in one place. Each is covered in more detail further down the page, with supporting documentation available on request.

STANDARDS

ISO 27001:2022 and SOC 2 Type II

Practices aligned with both frameworks, with annual internal and external audits.

HOSTING

AWS, EU data centers

Hosted in AWS with physical and environmental protections, and EU data residency.

ACCESS

SSO, MFA, role-based

Single sign-on and identity provider integration, with multifactor authentication.

ENCRYPTION

Encrypted at rest

Customer data encrypted with AWS KMS and separated into distinct databases.

MONITORING

Continuous monitoring

Our security posture is monitored continuously, with controls available for review on request.

RECOVERY

Backup and recovery

Documented backup, business continuity and disaster recovery procedures.

ORGANIZATIONAL SECURITY

How we run security as a company

Security starts with how the organisation operates: regular audits, continuous monitoring, trained people and a defined way to respond when something happens.

COMPLIANCE AND AUDITS

Audited across the organisation

We run annual internal and external audits across HR, IT, software development and physical security. Our practices are aligned with ISO 27001 and SOC 2.

COMPLIANCE AND AUDITS

Audited across the organisation

We run annual internal and external audits across HR, IT, software development and physical security. Our practices are aligned with ISO 27001 and SOC 2.

CONTINUOUS MONITORING

Posture monitored continuously

We monitor our security posture on an ongoing basis, not only at audit time. Specific controls and supporting documentation are available for review on request.

CONTINUOUS MONITORING

Posture monitored continuously

We monitor our security posture on an ongoing basis, not only at audit time. Specific controls and supporting documentation are available for review on request.

PEOPLE AND PROCESS

Security built into how we work

Colleagues are trained in secure development practices, and security responsibilities are part of how we hire, build and operate the platform.

PEOPLE AND PROCESS

Security built into how we work

Colleagues are trained in secure development practices, and security responsibilities are part of how we hire, build and operate the platform.

INCIDENT RESPONSE

A defined response, not improvised

We maintain an incident response plan, so that security issues are triaged and handled on a documented process when they arise.

INCIDENT RESPONSE

A defined response, not improvised

We maintain an incident response plan, so that security issues are triaged and handled on a documented process when they arise.

PLATFORM SECURITY

How the platform is protected

Controls run from access through to recovery: who can get in, where data lives, how the application is built, what we watch, and how we recover.

01

Access control

We integrate with single sign-on and external identity providers, with multifactor authentication through AWS Cognito. You control your own authentication settings, and access can be aligned with your security policies.

Access control

We integrate with single sign-on and external identity providers, with multifactor authentication through AWS Cognito. You control your own authentication settings, and access can be aligned with your security policies.

02

Infrastructure security

The platform runs in AWS data centers with strict physical and environmental protections. Customer data is encrypted at rest with AWS KMS and separated into distinct databases.

Infrastructure security

The platform runs in AWS data centers with strict physical and environmental protections. Customer data is encrypted at rest with AWS KMS and separated into distinct databases.

03

Application security

Development follows OWASP guidance, major code changes go through security review, and reported vulnerabilities are continuously remediated. Independent penetration testing is conducted annually by an external security company.

Application security

Development follows OWASP guidance, major code changes go through security review, and reported vulnerabilities are continuously remediated. Independent penetration testing is conducted annually by an external security company.

04

Monitoring and logging

Activity is logged and available through REST API connectors for SIEM integration. Public-facing services are scanned and reviewed regularly.

Monitoring and logging

Activity is logged and available through REST API connectors for SIEM integration. Public-facing services are scanned and reviewed regularly.

05

Backup and recovery

Backup procedures, business continuity plans and disaster recovery plans support data availability and recovery in the event of an incident.

Backup and recovery

Backup procedures, business continuity plans and disaster recovery plans support data availability and recovery in the event of an incident.

Our practices are aligned with ISO 27001 and SOC 2. We run annual internal and external audits across HR, IT, software development and physical security, and we monitor our security posture continuously.
50.1033, 14.4458 · PRAGUE HQ

FOR SECURITY & PROCUREMENT REVIEW

Bring us into your vendor review

Send us your security questionnaire, or ask for the documentation you need. We will walk your team through our controls and answer what your assessment requires.

CleverMaps footer visual for location intelligence and GeoDecision workflows

The GeoDecision platform
for the people who decide

CONTACT

CleverMaps, a.s.

Vídeňská 101/119

619 00 Brno, Czech Republic

© 2026 CleverMaps, a.s. · VAT CZ03728277

SOC 2 TYPE II · ISO 27001 · EU DATA RESIDENCY

CleverMaps footer visual for location intelligence and GeoDecision workflows

The GeoDecision platform
for the people who decide

CONTACT

CleverMaps, a.s.

Vídeňská 101/119

619 00 Brno, Czech Republic

© 2026 CleverMaps, a.s. · VAT CZ03728277

SOC 2 TYPE II · ISO 27001 · EU DATA RESIDENCY