With Concur's solutions taking care of your travel and expense management you can be rest assured that your data is protected from unauthorised access. We implement best industry practises in cloud computing, high granularity access control, audit logs, vulnerability management, security scanning and continuous monitoring to ensure comprehensive corporate data security. And it's not just our technology that enables us to deliver you a secured service; we even employ trained personnel, mature business processes and frequent audits against a variety of international standards to deliver a high level of security.

Business data security as per international standards

Concur is proactively subjected to a number of globally recognised standards:

  • Security ISO 27001
  • SOC 1 / SSAE 18
  • PCI certifications and audits
  • Sarbanes-Oxley (SOX) compliance (within the US)
  • VISA registered CISP Compliant Service Provider Level II

Data security in cloud computing

To ensure constant business data security, our travel expense management solution collects the minimum personal data that is necessary. This data is never used for marketing and is shared with third parties only when there is a specific requirement for an agreed business service. The data shared is encrypted and subsequently stored on Concur systems.