Indonesia Personal Data Protection Law
We follow its rules on personal data, including notice to authorities and data subjects after a breach.
3×24hours to notify
Compliance
Certification & Data Protection
Our information security is based on international standards and local law, and you can verify the certificate yourself.
CertificateCertified
ISO/IEC27001:2022
Information security management system (ISMS) · PT. SUM DIGITAL KONSULTAN
Verify on IAF CertSearch
// 01 ISO/IEC 27001
Audited by a third party
The international standard for information security management. From risk identification to running and improving controls, our system is audited by a third party.
- Risk identification and assessment
- Controls in daily operation
- Continuous improvement, reviewed every 6 months
How to verify
- Scan the QR code, or open IAF CertSearch.
- Search for PT. SUM DIGITAL KONSULTAN.
- Check the scope and the valid-until date.
Scan to verify
Visit Here
// 02 REGULATIONS
Law, contracts and procedures
Beyond the certificate, three more commitments shape how we handle data.
Client contracts & NDAs
We honour the terms of contracts and NDAs, and meet each client's own security requirements.
Custom NDAsClient checklists
Internal procedures (SOP)
Incident response and review procedures are documented and mandatory for all staff.
// 03 RESPONSIBILITY
You are the controller. We are the processor.
Defining responsibilities up front means fast, clear coordination if anything happens.
Data controller
Client
- Decides the purpose and means of processing
- Instructs us on data handling
- Accountable to data subjects and authorities
Data processor
SUM Digital
- Processes data only as instructed
- Never uses production data beyond instructions
- Reports incidents promptly
LET'S TALK
Try us on a small project first.
During the trial you can check our communication and quality before signing a full contract.
- 01 Inquiry
- 02 Discovery
- 03 Proposal & quote
- 04 Trial
- 05 Contract & build