As a software publisher serving local governments and the healthcare and social services sector, Kiosc handles sensitive data on a daily basis. After obtaining ISO 27001 and HDS certifications with our help, the company entrusted us with its outsourced DPO role to ensure its GDPR compliance.
Talk to an expert →

Kiosc develops online management software for local governments, businesses, and healthcare and social service organizations. Its clients entrust the company with personal data, including health information.
Already ISO 27001 and HDS certified, Kiosc also needed to ensure its compliance with the GDPR, a regulatory requirement central to its business. The company lacked dedicated internal resources. The requirements specific to sensitive data were complex, and no clear methodology existed to structure the process.
Kiosc first entrusted us with its ISO 27001 and HDS certifications. Satisfied with our support, the company continued working with us on GDPR compliance. The designated DPO is the consultant who had led its HDS project.
16 months of support. The mock audit in November 2023 preceded the certification, which was obtained in January 2024.
Training on the new version of the standard and on maintaining the management system, organized into two groups.
Cooperation with the supervisory authority and support on all GDPR-related matters.
Interviews with each department that handles personal data. The registry was reviewed in its capacity as a data controller and as a sub-
We respond to standard requests within 5 days and to urgent requests within 48 hours.
Renewal of the outsourced DPO, plus internal ISO 27001 and HDS audits in October 2024 and in 2026.
Our outsourced DPO provides you with day-to-day support regarding the GDPR and the protection of sensitive data.