Documill secures TISAX certification: better information security for car manufacturers

DOCUMILL’S OPERATIONS MEET THE EUROPEAN AUTOMOTIVE INDUSTRY’S HIGH INFORMATION SECURITY STANDARDS.

Documill is strengthening its position as the leading Salesforce–focused Nordic ISV targeting the European automotive industry. The information security practices and processes of Documill have been audited according to the automotive industry’s security criteria.  

Documill is now certified under TISAX requirements, which means that Documill’s information security processes and practices meet the high security standards set by the European automotive industry. TISAX standard is very similar to ISO 27001 but tailored for stricter security controls for the automotive industry.  

Documill offers Salesforce complementing document automation and collaboration solutions to European automobile manufacturers and certification is considered as a pre-requirement to become a supplier for this demanding clientele. For Documill’s customers, TISAX certification is a solid guarantee that Documill is a safe and reliable partner that takes information security seriously. 

”Earlier on, we had built a comprehensive Information Security Management System (ISMS) for defining the way Documill operates. By the request of selected European automobile manufacturers, we started the TISAX security audit process in Q1/2020. Ultimately, we see this TISAX security certification demonstrates Documill’s willingness to support even most demanding customers what comes to information security requirements.” says Mika Könnölä, CEO, Documill. 

“With TISAX certification, enterprises relying on Salesforce can extend the platform’s capabilities with Documill – can be certain that we at Documill are operating according to the most demanding industry standards. Now we have proved that we take the security and confidentiality of customer data seriously,” Könnölä continues. 

“The information security audit carried out for Documill included a wide-ranging assessment of the company’s information security policies and practices, third-party relationships – such as with subcontractors and partners, personal data protection and secure handling of customer data. We have documented all these in our ISMS and we can proudly say that Documill’s internal operations and SaaS service provisioning for our customers are fully compliant with TISAX requirements. With the help of ISMS documented practices, our operations are monitored and continuously developed”, says Terho Laakso, Vice President of Business Development at Documill. 

The purpose of the TISAX certification is to enable and simplify secure and reliable cooperation within the automotive industry networks. The ENX Association, an organization consisting of automobile manufacturers, suppliers and four national automotive associations, acts as the information security supervisory authority for TISAX.