ISO 27018
What is ISO 27018?
Code of practice for protection of PII in public clouds acting as PII processors.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →How ISO 27018 groups its controls
Frameworks that share controls with ISO 27018
Each of these has at least one control mapped to a control in ISO 27018. The number is how many ISO 27018 controls are shared, counted from the mapping graph.
Implementation guides for frameworks that overlap ISO 27018
Where ISO 27018 overlaps with the standards you already hold
Where to get trained on ISO 27018
4 courses in the catalogue cover ISO 27018 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.
What an auditor will ask you for
All 45 ISO 27018 controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the ISO 27018 evidence request listWhat ISO 27018 means in your sector
What ISO 27018 means for your job
Questions people ask about ISO 27018
What is ISO 27018?
Where does ISO 27018 apply?
What frameworks does ISO 27018 map to?
How do I get started with ISO 27018 compliance?
Query ISO 27018 programmatically
ISO 27018 and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO 27018 API reference and MCP config →How ready are you for ISO 27018?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.