We hold ourselves to the standard we help you meet.
Vissibl is certified to ISO 9001 & ISO 27001.
Our own compliance programme runs on Vissibl itself.
Your evidence, your policies and your audit history live inside our platform. This page sets out exactly how we protect them and how our AI is governed.
Our compliance, on our platform
ISO 27001 ISMS live on Vissibl
Certified by TÜV SÜD. Controls, evidence and risks managed in the same product our customers use.
ISO 9001 QMS live on Vissibl
Certified by TÜV SÜD. Quality processes documented, controlled and audit ready year round.
Evidence current, not annual
Vissi keeps our own gap analysis and evidence up to date between certification cycles.
Certified, not just claimed.
Independently audited and certified by TÜV SÜD, one of the world's most recognised certification bodies.
ISO 27001
Information security management. Our ISMS covers how customer data is stored, accessed, encrypted and monitored across the platform.
ISO 9001
Quality management. Our processes for building, releasing and supporting Vissibl are documented, controlled and continuously improved.
Powered by Vissibl
Both certifications are maintained on our own platform. Our auditor sees the same evidence trail, gap analysis and control status our customers see in theirs.
Vissi works for you. Never around you.
Vissi is the AI engine inside Vissibl. Here is what it can do with your data, and more importantly, what it cannot.
Your data never trains a model.
Customer data is not used to train Vissi or any underlying model. Our AI providers process your data under enterprise API terms that exclude training. This is a contractual commitment, not a policy preference.
Named providers, no surprises.
Vissi is built on models from Anthropic, OpenAI and Google Gemini, accessed through their enterprise APIs. We tell you which providers touch your data and under what terms.
You stay in the loop.
Vissi surfaces gaps, drafts documents and flags risks. Your team reviews and decides. Nothing changes in your compliance programme without a human accepting it.
We prepare you for your auditor. We never replace them.
Vissibl gets you ready for certification. The audit itself is always conducted by your accredited certification body, exactly as the standards require.
Scoped to your workspace.
Vissi only reads the documents, registers and evidence inside your Vissibl workspace. It has no access to your wider systems and no data crosses between customers.
Traceable outputs.
Every finding Vissi produces links back to the source document and clause it came from, so your team and your auditor can verify the reasoning, not just trust it.
Your data stays protected.
Encryption in transit
Every connection between your browser, our services and storage is encrypted with TLS.
Encryption at rest
All stored customer data, documents and backups are encrypted with AES 256.
Access control
Role based access within your workspace. Your people see what their role permits, nothing more.
Customer separation
Your workspace data is logically separated from every other customer. No co-mingling, no shared context.
Right to delete
Delete a document and it is gone from your workspace. End your contract and we delete your customer data.
Audit trail
User activity across your workspace is logged and available for your internal review.
Built for the industries where trust is not optional.
Vissibl serves construction, oil and gas, manufacturing, energy, marine and industrial services. Our customers hold safety records, incident reports and commercially sensitive audit findings. We treat every workspace with the weight that data deserves.
Your data stays in your region.
APAC & South Asia
In-region storage and processing for customers across Asia Pacific and South Asia.
MENA
In-region storage and processing for customers across the GCC and wider Middle East.
Europe
In-region storage and processing for European customers, aligned to GDPR requirements.
Vissibl runs on AWS by default, with Azure and Google Cloud available on request. Hosting region is agreed with each customer at contract.
Security is a programme, not a snapshot.
Independent certification audits
TÜV SÜD independently audits our ISO 27001 and ISO 9001 management systems, including annual surveillance.
Policy and governance reviews
Security and data protection policies are reviewed on a defined cycle and whenever the business materially changes.
Continuous monitoring
Infrastructure and dependencies are monitored for vulnerabilities as part of our ISMS controls.
Incident response
A defined incident response process covers detection, containment, customer notification and post-incident review.
Vendor risk, practised daily
We assess our own suppliers with the same Vendor Risk Management module our customers use on theirs.
Responsible disclosure
Found a potential vulnerability? Report it to us at legal@vissibl.com and we will respond.
Common questions.
Is Vissibl certified to ISO 27001?
Yes. Vissibl's information security management system is independently certified to ISO 27001 by TÜV SÜD. The certification is maintained on our own platform, so our evidence trail is the same trail our customers use.
Does Vissi use customer data to train its models?
No. Customer data is never used to train Vissi or any underlying model. We use enterprise API agreements with Anthropic, OpenAI and Google Gemini that explicitly exclude training on customer data.
Where is my data hosted?
Vissibl runs on AWS by default, with region aligned to your contract. In-region storage is available for APAC, South Asia, the Middle East and Europe. Azure and Google Cloud are available on request.
Can our auditor review the platform?
Yes. Vissibl is designed to make audits faster, not replace them. Your certification body conducts the audit independently; Vissibl prepares the evidence trail and control records they need to see.