ISO/IEC 27018:2025 — Protection of PII in public clouds
Personal data in the cloud, protected.
ISO/IEC 27018 sets out how public cloud providers protect the personal data they process for customers. fullCircle deploys the 2025 standard onto your ISO 27001 controls and evidence, alongside your privacy program.
Controls
Frameworks
Deployed Frameworks (4)
Deploy Framework(s)ISO 27001:2022
116 Framework Controls
Controls Coverage:96%
Evidence Coverage:92%
SOC 2
61 Framework Controls
Controls Coverage:100%
Evidence Coverage:95%
PCI DSS v4.0.1
252 Framework Controls
Controls Coverage:89%
Evidence Coverage:84%
ISO 42001
66 Framework Controls
Controls Coverage:74%
Evidence Coverage:61%
The team behind fullCircle is trusted by security leaders at
About ISO 27018
What is ISO 27018?
ISO/IEC 27018 is the code of practice for protecting personally identifiable information (PII) in public clouds acting as PII processors. It builds on ISO/IEC 27002 with privacy controls for consent, transparency, data return and deletion, and disclosure.
Who needs it
Public cloud and SaaS providers that process personal data on behalf of their customers.
How fullCircle helps
ISO 27018, without starting from scratch.
The 2025 standard, ready to deploy
Deploy ISO/IEC 27018:2025 from the Framework Deployer, mapped onto the controls and evidence you already have.
Shared with ISO 27001 and ISO 27701
Security and privacy requirements map to one harmonized control set, so you don't duplicate work.
Processor obligations, tracked
Keep evidence for data handling, return and deletion, and subprocessor disclosure current all year.
Subprocessors in the open
Track subprocessors in Vendor Risk Management and publish the list in your Trust Center.
Harmonize
ISO 27018 work that counts everywhere
Controls and evidence you maintain for ISO 27018 map to every other framework you run, so each requirement builds on work you've already done.
Test once · comply many
IAM-4
User Access Reviews
Expert services
risk3sixty assesses ISO 27018 alongside ISO 27001 and ISO 27701, with fullCircle included.
FAQ
ISO 27018 FAQ
Still have questions? Talk to our team.
Get ISO 27018-ready with fullCircle.
See how fullCircle maps ISO 27018 onto the controls and evidence you already have.