> ## Documentation Index
> Fetch the complete documentation index at: https://docs.latitude.so/llms.txt
> Use this file to discover all available pages before exploring further.

# ISO 27001

> Latitude's ISO 27001 audit status and information security management program.

# ISO 27001

Latitude is undergoing ISO 27001 audit work for its information security management system. Completion is expected by the end of May 2026.

<Note>
  Latitude does not claim ISO 27001 certification until the audit is finalized.
</Note>

## Status

| Area                    | Status                   |
| ----------------------- | ------------------------ |
| ISO 27001 audit         | In progress              |
| Expected completion     | End of May 2026          |
| ISO 27001 certification | Pending audit completion |

## Scope

ISO 27001 focuses on the information security management system behind Latitude's hosted platform.

Latitude's audit work covers areas such as:

* risk management and control ownership
* access control and least-privilege workflows
* infrastructure and operational security
* secure product development and change management
* incident response and continuity planning
* vendor and subprocessor management
* data protection for customer telemetry and derived reliability data

## AWS eu-central-1 operating boundary

Hosted Latitude stores and processes customer data and runs Latitude-managed inference in AWS eu-central-1 in Frankfurt, Germany. This boundary applies to product data such as traces, spans, sessions, annotations, scores, issues, evaluations, and search indexes.

See [Data protection](../data-protection) for more detail.

## Availability

ISO 27001 documentation and certification evidence will be available once the audit is complete.