DataGuard supports Behaviour Lab:

THE GOAL: BEHAVIOUR LAB’S HIGHLY SENSITIVE DATA MADE INFORMATION SECURITY AND PRIVACY A PRIORITY 

Behaviour Lab works hands-on with very sensitive data like trading data, investment theses and emotional data. They collect investment decision data over several years, run that through their algorithm and derive behavioural nudges for customers, such as: ‘Your strengths lie in buy selection and weighting, but you leave money on the table when deciding when to sell, impacting your fund negatively by X%’. Their algorithms and the client data they process pose a massive information security risk due to the highly confidential nature of both the inputs and outputs of their software platform. So, they wanted to work towards ISO 27001 and GDPR compliance proactively. They set very clear goals:

• Get ISO 27001 certified 
• Define Privacy controls for GDPR compliance 
• Train their employees on Information Security & Privacy 

CHOOSING DATAGUARD

DataGuard checked the right boxes: In-house experts, technology and European operations 

ISO27001 and GDPR compliance was high on the agenda of Behaviour Lab. They had to ensure that their information security controls were tightened and all data privacy measures in place.  

“I like the DataGuard Academy the most. Trainings are very useful as they have helped everyone in the company become more conscious of information security” said Calin Coman-Enescu, Head of Operations at Behaviour Lab. 

They started preparing for ISO 27001 on their own, but soon realised they didn’t have the necessary knowledge and expertise in-house. They were not sure if what they did was good enough, leading to uncertainty of passing the ISO 27001 audit.  

Behaviour Lab started looking for external support, evaluating some UK-based consultancies. DataGuard checked the right boxes – DataGuard's operations in the EU meant that the in-house experts had extensive knowledge and expertise on the UK and EU regulations. The Privacy, ISO and SOC2 roadmap looked promising, so Behaviour Lab felt confident that they were in safe hands.  

“The Policy Generator feature of the platform looks promising as it will reduce manual effort massively on our end. I’m not stressed about the upcoming changes in ISO Standards in 2023 because I won’t need to manually rework our policies” added Coman-Enescu of Behaviour Lab. 

LOOKING TO THE FUTURE - SOC2 WITH DATAGUARD

Having started with ISO27001 certification and GDPR compliance, Behaviour Lab is now piloting SOC2 certification with DataGuard.  

Managing Privacy and Information Security in one place via the DataGuard suite has already simplified project management, task completion, and stakeholder collaboration. In the future, the platform will bring in more efficiency by digitising and speeding up manual tasks. Meanwhile, DataGuard’s experts are at hand to provide advice and guidance throughout Behaviour Lab’s journey.