Security & governance

Security and Governance That You Can Trust

Enterprise-grade security and governance, built into our platform. Employee advocacy only works when organisations trust the platform behind it. That is why security, privacy and governance are core design principles at Apostle.

Why security matters in employee advocacy.

Employee advocacy connects people, content and company reputation. That means you are not just working with software, but with:

  • Employees, leaders and partners.
  • Corporate and personal social accounts.
  • Branded content, messaging and data.

Without strong security and governance, advocacy creates risk instead of value. Apostle is designed to support activation at scale, while maintaining full control, compliance and transparency.

How Apostle ensures security and governance.

ISO/IEC 27001 certification

Certified information security.

Apostle is officially certified under ISO/IEC 27001:2022.

  • Structured information security management.
  • Continuous risk assessment and improvement.
  • Independent audits of our processes and controls.

This certification confirms that our information security management system meets internationally recognised standards for security, risk management and compliance.

Data protection and privacy.

We take data protection seriously and operate in full alignment with GDPR requirements.

  • Clear data ownership for customers.
  • Data minimisation and purpose limitation.
  • Secure data storage and processing.
  • Data processing agreements available for all customers.

Your data remains your data. Always.

GDPR compliance
Roles and permissions in the platform

Governance and access control.

Employee advocacy requires control at every level of the organisation. The platform supports:

  • Role-based access and permissions.
  • Multi-layer governance for central, regional and local teams.
  • Approval flows and content ownership.
  • Clear separation of responsibilities.

This ensures brand safety without slowing teams down.

Secure operations.

Our security does not stop at the platform. Operational measures include:

  • Incident management and response procedures.
  • Business continuity planning.
  • Secure infrastructure and vendor management.
  • Continuous monitoring and improvement.

Security is an ongoing process, not a one-time checklist.

Operations update and incident interface
Roles and permissions in the platform

Transparency by default.

We believe security should be transparent and verifiable. That is why all relevant documentation is available through our trust center, including:

  • Security policies and controls.
  • Certifications and audit information.
  • Compliance documentation.

No sales gatekeeping and no hidden information.

Built for organisations that need to scale safely.

From growing teams to enterprise organisations, Apostle is trusted across the world.

$(document).ready(function() { // Only execute if the URL contains the Dutch slug '/nl' // if(window.location.href.indexOf('/nl') > -1) { // Check if the URL does not contain the word 'webinars' if(window.location.href.indexOf('webinars') === -1) { const modal = $('#webinar-modal'); function webModal(){ hasSeenBanner = getCookie("hasSeenWebinarBanner"); if (hasSeenBanner == "") { modal.addClass('active'); } } function closeModal(){ setCookie('hasSeenWebinarBanner', '1', '20'); modal.removeClass('active'); } $('#close-webinar-modal').click(function() { closeModal(); }); setTimeout(() => { webModal(); }, 15000); // Below you find three function for setting a cookie, getting a cookie and eventually checking whether the cookie exists function setCookie(cname, cvalue, exdays) { const d = new Date(); d.setTime(d.getTime() + (exdays*24*60*60*1000)); let expires = "expires="+ d.toUTCString(); document.cookie = cname + "=" + cvalue + ";" + expires + ";path=/"; } function getCookie(cname) { let name = cname + "="; let decodedCookie = decodeURIComponent(document.cookie); let ca = decodedCookie.split(';'); for(let i = 0; i #webinar-modal.active { z-index: 1000; opacity: 1; } #modal-wrapper { transition-property: opacity, z-index; transition-duration: 200ms, 0; transition-delay: 0, 200ms; } .geek-frame-holder { margin: 0 auto; }