WIDTH is pleased to announce that its Privacy Information Management System (PIMS) has been certified to ISO/IEC 27701:2025 by TÜV SÜD PSB Pte Ltd, an accredited certification body operating under the Singapore Accreditation Council.
The certification reflects WIDTH's continued commitment to managing personal information responsibly and strengthening privacy practices across the development and operation of its compliance technology.
What ISO/IEC 27701 certification means
ISO/IEC 27701 is the international standard for Privacy Information Management Systems. Certification provides a structured framework for establishing, implementing, maintaining and continually improving privacy management practices for organisations that process personally identifiable information.
That distinction matters in compliance technology. WIDTH's customers entrust the platform with sensitive information, including identity data, beneficial ownership structures, transaction histories, sanctions and adverse media findings, and the case records supporting risk decisions. Managing this information responsibly is fundamental to operating a credible compliance platform.
Strengthening privacy assurance for regulated institutions
For the institutions WIDTH serves, privacy and data protection are increasingly important considerations when assessing technology providers. Regulatory expectations around third-party risk and the management of personal information continue to evolve across Singapore, Hong Kong and the wider region.
ISO/IEC 27701 certification provides an internationally recognised framework for managing privacy risks and demonstrates WIDTH's commitment to maintaining defined and continually improving privacy management practices.
Why it matters to WIDTH. ISO/IEC 27701 certification strengthens the framework through which WIDTH manages personal information, supporting greater privacy assurance for customers, partners and other stakeholders.
Compliance takeaway. As privacy and third-party risk expectations continue to develop across APAC, regulated institutions increasingly need greater visibility into how technology providers manage personal information. An internationally recognised privacy management standard provides a clear framework for that assurance.
Privacy, security and explainability as one operating discipline
Privacy is closely connected to how WIDTH approaches secure and explainable compliance infrastructure. Automation only earns a place in regulated decision-making when the surrounding system is disciplined. Access must be controlled, changes governed, decisions logged and actions traceable to a person or policy.
ISO/IEC 27701 complements WIDTH's existing ISO/IEC 27001:2022 certification for information security management, extending our focus from information security to the broader management of personal information and privacy.
Together, these standards support WIDTH's objective of providing secure, privacy-conscious and auditable infrastructure for modern compliance teams.
Our thanks go to the WIDTH team whose work made this certification possible, and to TÜV SÜD PSB for the rigorous certification process. The work continues as we continually review and improve our privacy and information management practices.
For a copy of the certificate or further details about our privacy and security programme, contact marketing@width.com or visit our Security page.
About WIDTH
WIDTH is a compliance technology company formed following Vernal Capital's acquisition of Cynopsis. Built on Cynopsis's team, customer relationships and operating foundation, WIDTH provides software for managing regulatory workflows across onboarding, risk, transaction monitoring and ongoing compliance in a more efficient, auditable and scalable way.