generated: '2026-08-13'
method: searched
probe: true
url: https://www.awin.com/gb/legal/information-security
description: >-
  Awin has no dedicated trust centre subdomain - trust.awin.com does not resolve
  and www.awin.com/gb/security returns 404. What it publishes instead is an
  "Awin's Approach to Information Security" legal page carrying a named ISO 27001
  certification claim and a GDPR processing statement, plus a separate Compliance
  page and a Privacy page. There is no evidence portal, no downloadable audit
  report and no subprocessor list found.
certifications:
- ISO 27001
- GDPR
certification_detail:
- name: ISO/IEC 27001
  claimed: true
  statement: >-
    "We're proud to hold the ISO 27001 certification. This means our information
    security management system has been thoroughly audited and meets strict
    requirements for protecting the confidentiality, integrity and availability
    of your information. We have successfully completed external, independent
    audits to attest to our compliance with the ISO 27001 standard."
  certificate_available: false
  note: Certificate number, issuing body and scope are not published on the page.
- name: GDPR
  claimed: true
  statement: >-
    "We meet our legal obligations under the EU General Data Protection
    Regulation (GDPR) by using adequate technical and organisational measures."
  certificate_available: false
pages:
- url: https://www.awin.com/gb/legal/information-security
  role: information security / certifications
  status: 200
- url: https://www.awin.com/gb/compliance
  role: compliance management and sustainability
  status: 200
- url: https://www.awin.com/gb/privacy
  role: privacy policy
  status: 200
- url: https://www.awin.com/gb/site-notice
  role: site notice / legal imprint
  status: 200
whistleblowing:
  url: http://www.bkms-system.net/awin
  note: >-
    Awin links an external BKMS whistleblowing system from the site footer -
    a governance channel distinct from the security vulnerability channel.
evidence:
- source: https://www.awin.com/gb/legal/information-security
  keywords:
  - iso 27001
  - gdpr
  - information security
  - independent audits
absent:
- trust.awin.com (does not resolve)
- https://www.awin.com/gb/security (404)
- SOC 2 report
- Public subprocessor list
- Security evidence / document request portal
x-evidence:
  fetched: '2026-08-13'