Frameworks
Privacy management on autopilot with ISO 27701
Privacy scattered across your security programme isn't systematic enough for regulators or customers expecting proven privacy maturity.
Tidal builds a Privacy Information Management System. Extend ISO 27001 with privacy controls, demonstrate GDPR compliance systematically, and achieve recognised privacy certification.
ISO 27701 in depth
ISO 27701 is the international standard for a Privacy Information Management System. Since the 2025 revision it is a standalone management system standard, where the 2019 edition could only be used as an extension to ISO 27001. It helps organisations structurally organise privacy for both controllers and processors of personal data.
In practice, privacy is often organised through isolated documents and procedures. This causes lack of coherence between information security, privacy policy, and daily execution. This makes privacy dependent on people and snapshots.
By applying ISO 27701, a coherent privacy management system emerges. Privacy responsibilities, processes, and measures are structurally ensured within the existing ISMS.
How Tidal helps you get certified
Hit the ground running
Start with our pre-built controls, policies, and risk assessment templates.
Our platform guides you through establishing your ISMS scope, identifying assets, and implementing right-sized controls that match your business needs.
Why Tidal Control
We understand your challenges because we've been there. Our team of GRC experts and security professionals built Tidal to solve the real problems compliance teams face every day.
Made in Europe
Built and hosted in Europe. Your compliance data stays in the EU for full control and peace of mind.
Continuous automation
Automated evidence collection from cloud providers and development tools working 24/7 for you.
Real security
Build secure systems that protect your business and satisfy auditors, not just check compliance boxes.
Go beyond ISO 27701
Explore complementary frameworks that strengthen your privacy and security strategy.
ISO 27001
Securing your information foundation? ISO 27001 is the base framework that ISO 27701 extends, providing information security controls essential for protecting personal data.
GDPR
Managing privacy obligations across Europe? GDPR's requirements align directly with ISO 27701, helping you implement controls that satisfy both regulatory and framework requirements.
ISO 27018
Handling personal data in public clouds? ISO 27018 adds cloud privacy controls to ISO 27001, ensuring your cloud services meet privacy obligations when processing sensitive personal data.
NIS2
Covering critical sectors in Europe? NIS2 includes privacy protections alongside cybersecurity measures, complementing ISO 27701's approach to securing and protecting personal information.
Integrate with your existing tools
Testimonials
What our customers say
With a single click, one Tidal test checks dozens of disks for encryption. Doing that manually would take a lot of time.
Frequently asked questions
ISO 27701 sets out the requirements for a Privacy Information Management System (PIMS). In the 2019 edition it was an extension to ISO 27001; the 2025 revision made it a standalone standard with the same harmonised structure as ISO 27001 and ISO 42001, so the two integrate cleanly without one depending on the other.
Not since the 2025 revision, which removed ISO 27001 as a prerequisite. If you hold a certificate against the 2019 edition, check the transition deadline your certification body applies. Most organisations still run both, and our platform helps you implement them in an integrated manner, reducing duplication and maximising efficiency.
ISO 27701 provides structured controls that address GDPR requirements, helping demonstrate accountability and appropriate technical and organisational measures. While not GDPR-specific, it's recognised by supervisory authorities as evidence of systematic privacy management.
Yes, our platform includes controls for both data controller and data processor roles. We help you implement appropriate measures based on your specific data processing activities and relationships.
Yes, ISO 27701 certification demonstrates privacy maturity to customers and partners. It's increasingly requested in vendor assessments, particularly for organisations processing personal data on behalf of others.
Our platform continuously monitors privacy controls, tracks data processing activities, and maintains required documentation. You'll receive alerts for actions needed, helping you maintain both privacy compliance and certification efficiently.