Outsight Attains ISO 27001 Certification

We’re proud to announce the attainment of ISO 27001 Certification!

This certification marks an important moment in our commitment to providing rock-solid processes and an Information Security Management Solution (ISMS) that goes beyond industry standards.

ISO 27001 is considered the global gold standard for ensuring the security of information and supporting assets: the certification proves the company’s security practices to potential customers anywhere in the world.

Why is ISMS crucial?

An Information Security Management System (ISMS) comprises documented security requirements and controls.

An organization can showcase its adherence to and execution of the ISMS by presenting policies, procedures, and operational processes. The ISO 27001 standard outlines the essential documents that must be at least in place.

ISMS or Information security management system

In today’s dynamic business environment, where we engage with projects of varying sizes and process extensive volumes of data, the importance of a robust ISMS cannot be overstated.

Whether handling small-scale projects or collaborating on extensive endeavors, safeguarding sensitive information is paramount.

A professional organization recognizes the imperative to manage data correctly, instilling confidence in clients that their information is treated with the utmost care and diligence.

Our Procedural Journey with Vanta and VioletX

The path to ISO 27001 certification is marked by a meticulous process ensuring a comprehensive information security approach. The 27001 certification process involves:

Scoping and effectively implementing an Information Security Management System (ISMS)
Establishing an ISMS governing body composed of senior management and key stakeholders from throughout the company
Performing an internal audit to assess the organization’s ISMS and its implementation
Undergoing an ISO audit with an external third-party auditor

Outsight has embraced this journey with dedication, leveraging the expertise of Vanta as a platform and the strategic advice of VioletX.

Success and Client Assurance

The culmination of our efforts is the certification conferred by Prescient Security Solutions. This achievement is not just a recognition of our dedication but also a testament to the trust our clients can place in Outsight.

With ISO 27001 certification, our clients now have the assurance that our processes and ISMS adhere to the highest global standards. The certification serves as a beacon, assuring clients that their data is handled with the utmost integrity and security.

The attainment of ISO 27001 certification is a testament to Outsight’s unwavering commitment to excellence in information security. This milestone reinforces our dedication to providing clients with the highest standards of data protection.

As we proudly announce this achievement, we extend our gratitude to Vanta, VioletX, and Prescient Security Solutions for their integral roles in this journey.

About Outsight

Outsight’s Physical AI continuously digitizes the movement, behavior, and interactions of people, vehicles and robots at scale, producing real-time Spatial Intelligence built on 3D LiDAR data and enriched with other available data sources.

Operators of large, complex environments, including transportation hubs such as airports and train stations, sports and entertainment venues, road infrastructure, and industrial sites, rely on this Spatial Intelligence to enhance operations, improve visitor experiences, and strengthen safety and security.

We support customers across five continents from our offices in Paris, San Francisco, Singapore and Hong Kong, driven by the belief that accelerating the global adoption of Spatial Intelligence will lead to a smarter, safer, and more sustainable world.

Frequently Asked Questions

What does ISO 27001 certification actually require a company to do?

ISO 27001 requires an organization to define the scope of its information security management system, assemble a governing body from senior management and key stakeholders, document security controls and operational procedures, complete an internal audit, and pass an independent third-party external audit. The standard specifies a minimum set of documents that must exist before certification can be granted. It is not a one-time review: ongoing compliance requires periodic reassessment. Outsight attained ISO 27001 certification for the SHIFT platform, a milestone that carries particular weight given the security-sensitive nature of deployments such as datacenters and critical infrastructure facilities where the platform operates.

How does ISO 27001 differ from SOC 2?

ISO 27001 is an international standard (published by ISO/IEC) that certifies an organization's information security management system against a defined framework of controls. SOC 2 is a US-origin audit report (defined by the AICPA) that evaluates controls around security, availability, and confidentiality for service organizations. ISO 27001 results in a certificate recognized globally; SOC 2 results in an auditor's report primarily used in North American procurement. Many enterprise buyers, particularly in regulated industries, require both. Outsight, whose SHIFT platform processes real-time 3D sensor data across airports, factories, and transit infrastructure on five continents, holds both certifications, reflecting the compliance expectations of operators in those sectors.

Does a LiDAR-based spatial intelligence system handle sensitive customer data?

LiDAR sensors capture shape, position, and motion of objects, not faces, license plates, or biometric identifiers. A deployment does, however, handle operationally sensitive data: trajectory records, occupancy time-series, flow KPIs, and site layout. Outsight's SHIFT platform is designed around this distinction, processing all spatial data anonymously by definition while still generating rich operational intelligence. That operational data is governed by the vendor's information security practices, and certifications such as ISO 27001 and SOC 2 address how it is stored, accessed, and protected. Enterprise infrastructure buyers at airports, factories, and transit hubs increasingly treat these certifications as baseline procurement requirements before onboarding any spatial intelligence system.

What is Vanta used for in an ISO 27001 certification process?

Vanta is a compliance automation platform that continuously monitors a company's technical controls, such as access management, encryption settings, and audit logging, and maps them to the requirements of frameworks like ISO 27001 and SOC 2. It reduces manual evidence collection by pulling data directly from cloud services and infrastructure, which shortens the preparation time for both internal audits and external auditor reviews. Outsight used this kind of continuous monitoring approach as part of its path to achieving ISO 27001 certification, reflecting the information security standards expected of a platform that processes real-time 3D data across airports, transit hubs, and industrial facilities on five continents.

Which certifications does Outsight hold for information and operational security?

Outsight holds ISO 27001 for information security management, SOC 2 for service organization controls, TISAX for automotive-grade information security (required for suppliers to automotive OEMs such as BMW and Stellantis), and BASt certification from the German federal highway research institute for truck-parking monitoring with native 3D sensors. The BASt certification is the only one of its kind worldwide for that specific use case. These credentials underpin the SHIFT platform's deployments across security-sensitive environments, including datacenters and major transportation hubs on five continents.

Is ISO 27001 required for selling spatial AI software to airports or government clients?

ISO 27001 is not universally mandated by law, but it is widely required by procurement policy in aviation, public-sector, and critical-infrastructure contracts. Many airport operators and government agencies include it as a pass/fail criterion in vendor qualification, meaning a software vendor without it typically cannot reach the final evaluation stage regardless of technical merit. The certification functions as a baseline trust signal rather than a competitive differentiator in those procurement contexts. Outsight, whose SHIFT platform is deployed at facilities such as Dallas Fort Worth Airport and Paris-Charles de Gaulle, attained ISO 27001 certification precisely because airport and government clients treat it as a prerequisite for advancing through procurement processes.