Legit has obtained ISO 27701 certification, the international standard for privacy information management. ISO 27701 builds on ISO 27001 and establishes a framework for how organizations govern the processing of personal data through a Privacy Information Management System (PIMS). It focuses on accountability, transparency, and risk-based oversight of privacy-related activities across the organization. This certification confirms that privacy roles, responsibilities, and controls at Legit are clearly defined and embedded into documented processes for handling personal data. It also confirms that these practices are reviewed regularly and subject to independent assessment. Achieving ISO 27701 certification represents a deliberate step in strengthening how we manage personal data, reflecting our commitment to responsible, transparent, and well-governed privacy practices.
What this means for customers and partners
For organizations working with Legit, ISO 27701 certification provides assurance that:
- Personal data is managed through structured, consistently applied privacy governance
- Privacy risks are identified, assessed, and addressed in a systematic way
- Responsibilities for personal data processing are clearly assigned and enforced
- Privacy controls are reviewed regularly and aligned with applicable data protection requirements
- Privacy management practices are independently assessed through an accredited certification process
This certification supports customers and partners in meeting their own privacy governance, compliance, and accountability expectations.
Leadership insight
“ISO 27701 certification reinforces our approach to privacy as an organizational responsibility. It confirms that personal data is handled through defined governance, clear accountability, and ongoing oversight as we continue to support our customers and partners,” — Marijan Bračić, CEO, Legit
Scope and verification
ISO 27701 certification applies to the organizational processes, systems, and operations at Legit that involve the processing of personal data. The certificate can be independently verified through SGS.
