Letsignit validates its ISO 27001 and ISO 27018 certifications

We have some good news to share: Letsignit has just successfully passed its ISO 27001 and ISO 27018 certification audits, in their most recent versions, 2022 and 2025 respectively.

Since 2022, Letsignit has gone through uninterrupted audit cycles, each involving a full reassessment of the controls in place against the most recent versions of the applicable standards. The move to ISO 27018:2025, a recently revised version of the standard, illustrates this continuous improvement approach: requirements evolve, and compliance is never set in stone.

What "validation" really means

Obtaining an ISO certification for the first time is already a substantial undertaking. Validating it over the years, against updated versions of the standards, is another matter entirely. Here's a quick reminder of what these two certifications represent:

• ISO 27001:2022: the world's reference standard for information security. Through an independent audit, it certifies that an organization protects its systems and the data flowing through them in a structured and rigorous way. In practical terms, this covers access control, incident management, the security of communications and supplier relationships. The 2022 version strengthens requirements around cloud security and hybrid work environments, two realities that have become unavoidable for most organizations.
• ISO 27018:2025: a complement to the 27001 certification, this is the standard specific to the protection of personal data in the cloud. It certifies that your employees' information (names, job titles, contact details and so on) is handled with the required organizational and technical safeguards, and that it cannot be used for any purpose other than those intended. The 2025 update aligns these requirements with the reinforced level set by ISO 27001:2022.

Both certifications are awarded following an audit by an independent, accredited third party. For your teams, that's a documented guarantee, not a mere statement of intent.

A long-term commitment

Since 2018, Letsignit has made GDPR and data protection structuring pillars of its organization. This ISO validation follows that same logic: a continuous, audited and documented approach, not a one-off effort.

To go further on our overall approach to data protection, Frédéric explains in detail what shapes our practices day to day.

What it means in practice

Letsignit is directly connected to your employees' email systems. Every signature deployed handles personal data: names, job titles, contact details, photos. That's exactly what these certifications govern.

For IT and CISO teams, they provide a tangible element in any vendor qualification process. The 2022 and 2025 versions of the standards cover cloud environments, directly applicable to a solution like Letsignit, and accredited third-party audits make the assessment objective, independent of any commercial claim.

Learn more for IT teams.

For communications and marketing teams, it's the assurance that every email signature relies on infrastructure that is reliable, compliant and regularly audited. Our guide on email signatures and GDPR compliance explains how the two work together day to day.

Key takeaways

• Letsignit's ISO 27001:2022 and ISO 27018:2025 certifications have just been validated in their latest versions.
• This validation reflects a continuous effort, not a one-time achievement.
• The new version of ISO 27018 aligns with ISO 27001 and incorporates strengthened requirements on data protection in the cloud.
• All data is hosted in Europe, encrypted, continuously monitored and audited every year.
• For your IT teams, it's a solid argument in any vendor qualification process.