Innovation Opportunity

Ahya maintains a comprehensive Information Security Management System (ISMS) aligned with ISO 27001. Our ISMS includes detailed policies and controls covering legal, technical, and operational aspects of risk management to safeguard customer data and ensure business continuity.

Through our partnership with AWS, Ahya adheres to ISO 27017, a security standard specifically designed for cloud environments. It introduces best practices and controls for managing cloud-specific risks — such as access control, virtual machine configurations, and tenant isolation — to ensure secure and compliant operations in the cloud.

Ahya also complies with ISO 27018 through AWS to ensure the protection of personally identifiable information (PII) in cloud environments. This standard governs how PII is collected, processed, stored, and deleted — and enforces principles such as transparency, data subject consent, and breach notification protocols.

Ahya ensures compliance with SOC 2 Type 2 through its partnership with Amazon Web Services (AWS). This certification demonstrates the effectiveness of AWS’s controls over time across five Trust Services Criteria — Security, Availability, Processing Integrity, Confidentiality, and Privacy — enabling Ahya to meet enterprise-grade compliance expectations with confidence and transparency.

VAPT (Vulnerability Assessment & Penetration Testing)
We regularly conduct Vulnerability Assessments and Penetration Testing to proactively identify and address security weaknesses across our products. These assessments enhance the resilience of our systems against emerging cyber threats.