What This Means for You

We understand the critical importance of safety in dialogue. That’s why Echo, by design, is built for trust. When organisations use our software to gather stakeholder voices and shape critical decisions, they're handling conversations that matter. These dialogues shape policies, influence community outcomes, and contain perspectives that participants trust us to protect. ISO 27001 certification validates that we have the systems, processes, and controls in place to safely and securely handle all data, to so safeguard this trust.

Privacy & Trust at Dembrane

Obtaining ISO 27001 certification represents that we operate a fully audited Information Security Management System (ISMS). This means every potential security risk is systematically identified, assessed, and managed before it can become a threat.

When our team identifies a potential vulnerability - whether in a third-party integration, a new feature, or an emerging threat landscape - our ISMS ensures it's documented, evaluated, and addressed according to proven protocols.

Built for Trust from Day One

This certification reinforces what's always been core to Echo's design philosophy. From anonymous-by-default contributions to EU-based data processing, from being source-available to maintaining tech independence - every architectural choice reflects our commitment to earning and keeping your trust.

All together, our compliance framework now includes:

• ISO 27001 certified information security

• Full GDPR compliance with EU data sovereignty

• Anonymous stakeholder contributions by design

• No training on customer data - ever

• Transparent, source-available codebase

Your Data, Your Control

For government bodies, infrastructure developers, housing associations, and public enterprises who rely on Echo, this certification provides additional assurance. You can now point to internationally recognised standards when explaining to stakeholders, compliance teams, and participants how their data is protected.

The certification requires regular audits, continuous monitoring, and constant improvement of our security posture. As the threat landscape evolves, so do our defences.

Learn More

Want to dive deeper into our security and compliance measures? Visit our Compliance & Trust Data Room where you'll find detailed documentation on our data processing, AI ethics governance, and security infrastructure.

For specific security questions or to discuss your organisation's requirements, book a call with our Trust Lead, Bram Delisse: Schedule a consultation.