ISAE 3000 report
An independent auditor has reviewed how we process personal data
You can download the report and attach it to your tender.
Download the report (PDF, in Danish)What an ISAE 3000 report is
An ISAE 3000 report is an independent auditor’s review of how a company actually processes personal data. The auditor examines the processes, not the description of them. Unlike a GDPR declaration, which a company writes about itself, this one is signed by a third party.
That means you do not have to take our word for how we work. You can read the conclusion and document it to your management, your data protection officer or in a tender.
The current report
- Auditor
- Dansk Revision
- Issued to
- Hey Group ApS, the parent company of Ubivox
- Period
- 1 October 2024 to 30 September 2025
- Conclusion
- No qualifications
- Next audit
- Autumn 2026
Ubivox is a company within Hey Group, and the report is issued to the group. That is why the document carries the name Hey Group ApS rather than Ubivox.
The report is supplied as a PDF. If you need an older report, you canwrite to us.
Download the report (PDF, in Danish)The rest of the documentation
If you need more than the report, the rest is here.
If you need a data processing agreement, we will send it on request.