What certifications and compliance frameworks does Annie support?

Annie's compliance posture is designed for regulated Australian industries. Current certifications and framework alignment include:

ISO 27001 — The Annie platform operates under an ISO 27001-certified information security management system, covering risk management, access control, incident response, and continuous improvement.

Australian Privacy Act 1988 — Annie's architecture and operations are designed to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Data handling, access controls, and retention policies are structured accordingly.

ASD Information Security Manual (ISM) alignment — Annie's deployment architecture — including air-gap capability, access control, and audit logging — is aligned with ASD ISM controls, positioning Annie for deployment in government environments where PROTECTED classification is relevant.

APRA CPS 234 design support — Annie's data residency, access controls, and incident response design are structured to support APRA CPS 234 compliance for regulated financial services entities.

For specific compliance documentation, contact us during the enterprise briefing process.