ISO/IEC 27001:2022 certified

We're proud to share that Smilecloud's information security management system has been independently certified to ISO/IEC 27001:2022 — the world's most widely recognized standard for managing information security.

For a platform built around patient imaging, treatment collaboration, and the daily work of dental clinics and laboratories, protecting information isn't a feature — it's the foundation. This certification is independent confirmation that the way we protect that information holds up to rigorous, external scrutiny.

What ISO/IEC 27001 actually certifies

ISO/IEC 27001 is the leading international standard for information security management. It doesn't audit a single product or a checklist of settings. It certifies an organization's information security management system (ISMS) — the whole framework of policies, processes, people, and controls used to identify risks to information and manage them systematically over time.

In other words, it's not a one-time snapshot. It's evidence that security is built into how Smilecloud is run, and that we've committed to keeping it that way.

Independently audited, independently verifiable

Our certification was issued by Schellman Compliance, LLC, an accredited, independent certification body, and it can be verified independently through Schellman's certificate directory here.

What's covered

The certified scope covers the information security management system supporting the design, development, and operations of the Smilecloud Digital Services — such as digital smile design, visualization tools, and interdisciplinary collaboration on virtual dental cases — including the information assets, processes, systems, and people that support the delivery and protection of those services.

What this means for you

If you're a clinic, a laboratory, or a partner deciding who to trust with your and your patients' data, ISO/IEC 27001 gives you something concrete: assurance from an independent third party that Smilecloud operates a managed, audited approach to information security, not just good intentions.

It also complements the other independent assessments behind Smilecloud — including our HIPAA attestation and our GDPR program — each of which addresses specific obligations, while ISO/IEC 27001 certifies the overarching system that governs how all of them are run.

This is a checkpoint, not a finish line

Certification isn't a plaque you hang on the wall and forget. Under ISO/IEC 27001, our ISMS is subject to ongoing surveillance audits throughout the certification period, and we're committed to continually improving how we protect the information our customers entrust to us.

Want the certificate for your own compliance records, or have questions about our security posture? Verify our certification on Schellman's directory, or request a copy of the certificate at contact@smilecloud.com. You'll find more in our Security & Compliance Center.

‍