Information Security & Availability Commitment / TISAX
At Valsight, protecting sensitive data and ensuring uninterrupted service is not just a compliance requirement — it’s part of our DNA.
We have achieved TISAX AL3 compliance for both Information Security (Very High) and Availability (Very High).
TISAX (Trusted Information Security Assessment Exchange) is the automotive industry’s security standard, managed by the ENX Association and based on the ISO 27001 framework. It incorporates all the core principles of ISO 27001 and adds sector-specific requirements for confidentiality, integrity, and availability — especially for environments where information is highly sensitive and uptime is mission-critical.
What “TISAX AL3 Very High Protection Needs & Very High Availability” means for you:
Highest assurance level – Required for projects involving strictly confidential and business-critical data.
Very High Protection Needs – Strong encryption, multi-factor authentication, and rigorous physical & logical access control.
Very High Availability – Redundant systems, rapid disaster recovery, and 24/7 monitoring to minimize downtime.
Trusted Supply Chain – Security standards extend to our partners and service providers.
While ISO 27001 is recognized globally as the baseline for information security management, “TISAX AL3 Very High Protection Needs & Very High Availability” goes further by tailoring and extending these controls to meet the automotive industry’s most demanding security and availability requirements. This means that our TISAX accreditation not only meets but surpasses the scope of ISO 27001 for our operational context.
ISO 27001 vs. TISAX AL3 (Very High Protection Needs & Very High Availability)
Feature / Scope | ISO 27001 | TISAX AL3 (Very High) |
---|---|---|
Framework Basis | Generic, applicable to all industries | Based on ISO 27001, extended for automotive |
Assessment Focus | Confidentiality, integrity, availability | Confidentiality, integrity, availability with stricter thresholds |
Assurance Level | Defined by organization’s risk analysis | Fixed highest level (AL3) for very high-risk scenarios |
Availability Requirements | Determined by risk assessment | Very high uptime, redundancy, rapid recovery |
Supplier Requirements | General due diligence | Strict supplier and partner compliance |
Recognition | Global, cross-industry | Industry-specific, required by major automotive OEMs |
Security Rigor | High | Higher – supersedes ISO baseline for covered areas |