TikTok Obtains ISO 27001 Certification for Information Security

At TikTok, our top priority is the safety, security, and privacy of our community. We are constantly working to improve and advance our security efforts to ensure that TikTok remains a safe platform for self-expression, creativity, and joy. We are proud to announce that TikTok has officially obtained ISO 27001 certification in the US and UK, and will soon be certified in Singapore, Ireland, and India as well. The ISO certification is a globally recognized standard for information security, which demonstrates our commitment to investing in the necessary resources and technology to protect our global community.

As part of our commitment to building a world-class global security organization, we collaborate with external partners to test our defenses. We invite security, privacy, and policy experts to review our code and algorithm at TikTok's Transparency and Accountability Center. During the ISO certification process, independent third-party auditors conducted rigorous checks to ensure that TikTok's global security, risk, and control operations meet the highest standards. This included evaluating how we protect our platform's infrastructure, development, operations, and services.

To achieve the ISO 27001 certification, we had to demonstrate the implementation and maintenance of an effective Information Security Management System (ISMS) to safeguard data. We also had to validate a range of security controls to show our alignment with industry best practices. Additionally, we emphasized cross-functional collaboration across security, IT, legal, privacy, and HR teams to foster a culture of security awareness.

Obtaining the ISO 27001 certification is an important milestone in our ongoing commitment to comprehensive security. We are dedicated to continuously improving and leading the industry by investing, iterating, and upholding our commitments to protect the vibrant TikTok community.