Conga Corporation
ISO 27001:2022 Scope of Certification
The certificate scope comprises the ISMS supporting the management of operations underlying the systems used to develop and operate the “The Conga Commercial Operations Suite” providing services to Conga customers. The organizational scope includes the management of Information Security, Cloud Operations, Corporate Information Technology (IT), Infrastructure Operations, Facilities, Human Resources (HR), Engineering, Technical Support, Product Management, and Legal teams affecting the ISMS. These activities are governed by the implemented controls in accordance with the organizational Statement of Applicability, with consideration of the internal and external context of the organization, the requirements of interested parties, such as customers and regulatory bodies, and boundaries with third parties. This is in accordance with the SOA Version 1.4, dated 7/13/24.
Certification number: 4367-1137110522
Original Date: February 27, 2020 (Transfer Certificate # 2020-022702)
Latest Issue Date: April 2, 2025
Expiration Date: February 16, 2026
The CIRQ Certification Mark is the property of the Insights Association and is subject to the restrictions established in the Terms of Use for the CIRQ Certification Mark as references in the CIRQ Quality Manual.
ISO 27701:2019 Scope of Certification
The certification scope comprises the Privacy Information Management System (PIMS) that governs all systems used to develop and operate applications providing services to Conga customers, as well as by its role as a processer of personal data. The scope of the PIMS includes the assets, technologies and processes employed by Conga for processing and management of services to its customers. Additionally, the scope is defined with consideration of the internal and external context of the organization, the requirements of interested parties, such as customers and regulatory bodies, and boundaries with third parties.
This is in accordance with Conga Corporation’s Statement of Applicability (SOA) version 5/14/25 v 1.6, and in association with its ISO/IEC 27001:2022 certificate 4367-1137110522.
Certification number: 4367-1137110522
Original Date: 15 October 2025
Latest Issue Date: 15 October 2025
Expiration Date: 14 October 2028
