PRISM Privacy+ Certification
Why Become Certified?
As a records and information management service provider, maintaining compliance and security best practices isn’t optional—it’s essential. i-SIGMA’s PRISM Privacy+ Certification provides independent, third-party verification that your operations meet these standards, giving your clients confidence that you’ve done more than simply claim compliance.
By achieving Privacy+ Certification, you help your clients fulfill their regulatory due diligence requirements while positioning your business as a trusted, credible partner in information management.
Understanding the PRISM Privacy+ Certification Process
Our certification represents the highest level of professional information destruction standards. We rigorously evaluate and validate every aspect of data protection protocols.
Why Use a Privacy+ Certified Service Provider?
Data protection regulations require organizations to perform due diligence and ongoing monitoring of records management providers. i-SIGMA’s Privacy+ Certification is specifically designed to meet these requirements—verifying compliance and security best practices so you can confidently fulfil your regulatory obligations.
PRISM Privacy+ Certification FAQs
Yes. Privacy+ Certification is a benefit of i-SIGMA membership, and you must be an active member in good standing to apply and maintain certification.
No. Membership and Privacy+ Certification are separate programs with separate annual fees and renewal cycles.
Submit your application and fees, then complete an audit through i-SIGMA. You may also qualify using an existing SOC 2 report or ISO 27001 certification.
Typically 4–8 weeks through the audit process. If submitting a qualifying SOC 2 or ISO 27001, it may be completed more quickly.
All requirements are available in the Privacy+ Certification Specifications Reference Manual.
Yes. The i-SIGMA Certification team is available to guide you. You can reach them at certification@isigmaonline.org.
You’ll receive feedback and guidance to address any gaps, with the opportunity to move forward once requirements are met.
Concerns can be reported to ethics@isigmaonline.org and will be reviewed in accordance with i-SIGMA’s Code of Ethics.
Member Voices
