Security Trust Centre
Enterprise-Grade Security for Supplier Management
HICX is the supplier management platform trusted by global enterprises to run critical supplier workflows securely. Built on a single-tenant architecture, HICX guarantees total data isolation—ensuring your environment is never shared, never compromised, and always under your control.
Every component of the platform has been designed with security, compliance, and operational assurance at its core:
- ISO/IEC 27001-certified to meet the highest standards of information security
- Single-tenant architecture with isolated instances for full data privacy
- Role-based access controls (RBAC) and SSO support to protect user authentication
- End-to-end encryption (in transit and at rest) to safeguard platform workflows
- Penetration testing performed regularly by independent security specialists
- Audit trails and monitoring to ensure traceability across every action
Whether you’re integrating with ERP, onboarding new suppliers, or managing risk across functions, HICX delivers the secure foundation your business needs—without compromise.
HICX’s Commitment to Security
We continuously work to maintain and improve our security posture. Our application is built on highly secure, reliable and scalable cloud infrastructure through Amazon Web Services. Our certifications are regularly renewed and updated to ensure ongoing compliance with the latest standards.
Our security measures include:
- Regular internal and external auditing
- Annual penetration testing
- Training and testing for all employees
- Robust security measures
- Risk assessment and business continuity plans
- A comprehensive incident management strategy
- Strictly controlled access management
Certifications and Compliance
ISO 27001 Certification
HICX has achieved ISO 27001 certification, which validates our implementation of a comprehensive Information Security Management System (ISMS). For more information and to access our certificates, please click here.
SOC 1 Type 2
We are SOC 1 Type 2 attested, which demonstrates HICX’s commitment to maintaining robust financial and operational controls. To access our SOC report, please email our security team.
Annual Penetration Testing
Annual penetration testing is conducted by a third party provider, ensuring we are proactively securing our application, meeting our compliance requirements, reducing risks, and building stronger relationships with customers and partners.
Data Privacy
Data privacy is of the utmost priority to us. HICX employs numerous measures to protect data, including:
- Controlled access to physical and electronic data
- All data is encrypted in transit and at rest using SSL/TLS 1.2+ and AES-256
- Data confidentiality, integrity and availability
- Established procedures to uphold data subjects’ rights
- Prompt and regular data erasure
Privacy Policy: https://www.hicx.com/privacy-policy/
Request ICO Certificate of Registration (email security team)
