Sterling - Trust Center
Compliance and Security Portal for Sterling.
Framework overview
An overview of Sterling's compliance status across common frameworks like SOC 2, ISO 27001, ISO 9001, and GDPR.
SOC 2 Type 1
Compliant
27Policies
An up to date list of policies published internally by Sterling.
Compliance & Regulatory Monitoring
Data Classification & Handling
Data Processing Addendum
Security & Privacy Awareness Training
Physical Security & Environmental
Access Control & Least Privilege
Authentication & Password
Encryption & Crypto Controls
Logging, Monitoring & Audit
Vendor & Third-Party Risk
Information Sharing & Transfer
Remote Access & BYOD
Privacy & Data-Subject Rights
Policy Management & Exception Handling
Change & Release Management
20Controls
An up to date list of controls published internally by Sterling.
Employee Access
Secure Devices
Encryption at Rest
Production Firewall & No-Public-Access Controls
Device List
Public Policies
Code Changes
Planning
Organisation Chart
2FA
Infrastructure Inventory
App Availability
Board Meetings & Independence
Backup Restoration Test
TLS / HTTPS
Secure Code
8Subprocessors & Vendors
Third-party vendors and subprocessors used by Sterling.
1Additional Resources
Download additional resources shared by Sterling.
Sterling - SOC 2 Type 1 Report.pdf