Director – Brand

Round achieves ISO 27001 certification. Roundtreasury is pleased to announce that Round is now ISO 27001 certified, an internationally recognised standard for information security management systems (ISMS). ISO 27001 certification provides independent, third-party validation that Round has implemented rigorous security controls, processes, and infrastructure to protect customer data and financial operations. It confirms that its systems meet globally recognised requirements for information security, risk management, and compliance. As a financial infrastructure platform that enables customers to manage treasury, accounts payable, and payroll workflows, protecting customer data and ensuring secure execution is fundamental to how Round operates. This certification reinforces its commitment to building secure, reliable infrastructure that enterprises and scaling companies can trust. Why ISO 27001 certification matters for financial infrastructure and enterprise customers. ISO 27001 is widely recognised as the gold standard for information security compliance. It demonstrates that an organisation has implemented a comprehensive security framework designed to identify, manage, and reduce information security risks. For Round and its customers, ISO 27001 certification validates its ability to: * Protect sensitive financial and operational data * Secure cloud infrastructure and production systems * Enforce strict access controls and identity management * Continuously monitor systems for threats and vulnerabilities * Detect and respond to security incidents effectively * Maintain secure and auditable operational processes As finance teams increasingly rely on cloud-based financial infrastructure, independently verified security standards like ISO 27001 provide assurance that critical workflows and data are protected. This certification supports organisations that require strong compliance standards, including enterprise companies, regulated businesses, and security-conscious technology teams. How Round achieved ISO 27001 certification. To achieve ISO 27001 certification, Round implemented a comprehensive information security management system covering infrastructure, processes, and internal controls. Roundtreasury partnered with Sprinto, a security compliance platform designed for cloud-native companies, to enable continuous monitoring of security controls and automate compliance workflows. Sprinto integrates with its infrastructure and tools, allowing Roundtreasury to: * Continuously monitor security controls across systems * Automate evidence collection and compliance reporting * Maintain real-time visibility into its security posture * Streamline audit readiness and certification processes This approach ensures that Round maintains ongoing compliance and strong security practices as its platform evolves. ISO 27001 certification reflects not just a point-in-time audit, but a continuous commitment to protecting customer data and infrastructure. What ISO 27001 certification means for Round customers. Achieving ISO 27001 certification strengthens Round's ability to support organisations that require enterprise-grade security and compliance. Customers using Round can rely on infrastructure that meets internationally recognised standards for: * Financial data protection * Secure payment and treasury workflows * Cloud infrastructure security * Enterprise compliance and audit readiness This milestone supports its customers' own compliance requirements and reinforces Round's role as a secure execution layer for financial operations. Building secure financial infrastructure remains a core priority. Security is a foundational part of Round's platform and development process. ISO 27001 certification reflects the systems and controls Roundtreasury has built to ensure financial workflows execute securely and reliably. As Round continues to expand its platform and integrations, Roundtreasury remain committed to maintaining the highest standards of information security, compliance, and infrastructure reliability. ISO 27001 certification is an important milestone, and part of its ongoing investment in building secure, enterprise-ready financial infrastructure.

Sprinto unveils new artificial intelligence capabilities to master risks and compliance. News provided by. Share this article. Sprinto launches revolutionary AI capabilities that set a new benchmark in the industry for smart and autonomous compliance. SAN FRANCISCO, November 12, 2025 /PRNewswire/ - Sprinto, a leading platform for GRC and compliance automation, today announced the launch of an advanced suite of AI capabilities designed to make GRC truly autonomous. At the heart of this launch is the innovative AI Playground, a no-code custom action generator that allows compliance teams to design, test, and deploy artificial intelligence agents in minutes. Unlike generic automation tools, AI Playground leverages contextual data from an organization's environment, including its controls, frameworks, and risk level, to create agents that act with real intelligence and precision. These include supplier risk analysis agents, evidence gap analysis agents, and risk assessment agents, all operating within an organization's compliance environment. The suite is complemented by Ask AI, Sprinto's smart compliance assistant. It allows teams to query their entire compliance and risk management database to answer questions about policies, risks, and supplier data in plain language. Ask AI makes compliance knowledge accessible to all company employees, providing instant and contextual responses without the need for expert intervention. "It is impossible for businesses to keep up with the constant evolution of regulations across all regions and sectors," said Girish Redekar, co-founder and CEO of Sprinto. "Technology is the only scalable way to keep pace, and that's where Sprinto AI comes in. The goal is to act as a silent mode co-pilot for cybersecurity professionals, enabling them to govern and secure their business in the age of AI." All of Sprinto's new AI capabilities are built on a human-in-the-loop architecture to ensure that humans always have the final say. The platform adheres to ISO 42001 standards for ethical AI, ensures strict data privacy, and never uses customer data for model training. With this launch, Sprinto champions AI-driven automation, allowing GRC professionals to be at the forefront of the next wave of compliance innovation. About Sprinto Sprinto is an AI-native GRC and compliance automation platform that supports over 200 global security standards, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS. Trusted by over 3,000 companies in 75 countries, including Anaconda, WeWork, and Whatfix, Sprinto helps organizations stay audit-ready, manage risks, and scale confidently through over 300 integrations and AI-powered automation. To learn more, visit https://sprinto.com/blog/introducing-sprinto-ai/

To support this process, Infithra partnered with Sprinto - a powerful compliance automation platform built for cloud-hosted companies.