ISO 27701
ISO/IEC 27701 is the international standard for a privacy information management system. It sets requirements for organizations that act as controllers or processors of personal information.
ISO/IEC 27701
What you get with ISO 27701.
- ISO 27701 available as a prebuilt framework
- 109 requirements tracked with status and evidence
- Policies and evidence managed with your security program
Running ISO 27701 in Varman
ISO/IEC 27701 is available in Varman as a prebuilt framework. The numbers below are what it contains in the product today. You add it to your workspace and work through it in the same place as your policies, risks, vendors, and evidence.
- 109
- requirements
- 81
- controls mapped
- 58
- evidence tasks
- 41
- policy templates
1. Add the framework
Each ISO 27701 requirement appears with its status, so you can see what is met and what is still open.
2. Connect your systems
Integrations run scheduled checks against your cloud, identity, and developer tools and record the results as evidence. See the integrations.
3. Close the gaps
Policies, tasks, and uploaded evidence cover what cannot be checked automatically. Readiness for ISO 27701 updates as each item is completed.
4. Work with your auditor
Varman organizes the evidence. Any audit, assessment, or certification is carried out by an independent third party, not by Varman.
ISO 27701 questions, answered.
What is ISO 27701?
ISO/IEC 27701 sets requirements for a privacy information management system (PIMS). The 2019 edition was an extension to ISO/IEC 27001. The 2025 edition was published as a standalone standard, so it can be certified without an ISO 27001 certificate.
Does ISO 27701 apply to controllers or processors?
Both. The standard has separate controls for organizations that act as controllers of personal information and for those that act as processors. You apply the set that matches your role, or both.
Does ISO 27701 certification mean GDPR compliance?
No. Certification shows that you run an audited privacy management system, which supports your GDPR work, but it does not by itself prove compliance with the law.
How does Varman help with ISO 27701?
Varman ships ISO 27701 as a prebuilt framework with 109 requirements, 81 mapped controls, 58 evidence tasks, and 41 policy templates. Integrations collect evidence automatically, and any audit or certification is done by an independent third party.