Trust Center

Welcome to the CIAL Dun & Bradstreet Trust Center. This portal serves as a foundational resource to provide our customers, partners, and visitors with a clear, high-level overview of our information security posture, operational practices, and commitment to data protection.

Who We Are and What We Do

CIAL Dun & Bradstreet is a leading provider of data, insights and platforms to support smart decisions on an organizations customers and suppliers in 44 countries across Latin America and the Caribbean. As the exclusive partner of Dun & Bradstreet in the region, CIAL provides a suite of products, data services, and technology infrastructure—including platforms such as CIAL360, API's, and Dunsguide.

Our Trust and Security Program

At the core of our commitment to security is our Information Security Management System (ISMS). Managed in collaboration with our Compliance department under the leadership of our Chief Compliance Officer, our ISMS is designed to ensure systematic adherence to regulatory requirements, industry standards, and internal security policies across all business units.

Our security program is built upon several key pillars:

• Scope of Protection: Our ISMS boundaries encompass our organizational units, products, data, and technology infrastructure. This includes our production networks, supporting back-office systems, internal corporate networks, and our cloud data center providers (such as AWS and Google Cloud Platform). We safeguard this information regardless of whether it is stored, processed, or transferred.*
• Core Security Objectives: We establish measurable information security objectives aligned with our Information Security Policy. These objectives focus on protecting the confidentiality, integrity, and availability of our information and systems.
• Operational Policies and Controls: We maintain a comprehensive set of management-approved policies to guide our daily operations and mitigate risks. These include:
  • An Information Security Policy to support internal controls.
  • An Encryption Policy establishing requirements for cryptographic controls.
  • An Asset Management Policy for tracking and managing organizational assets.
  • A Telework and Endpoint Devices Policy governing remote work and device usage.
  • Physical Security Policies to protect our company headquarters.
• Safe Software Development and Change Management: To ensure system quality and security, we test all code changes prior to implementation. Additionally, we maintain a critical change management process that authorizes designated personnel to validate and release emergency security patches and bug fixes outside of standard timelines when necessary to maintain system availability and security.
• Personnel and Collaboration: We document and maintain records of the necessary competence of all personnel affecting our information security program. Furthermore, we actively communicate and exchange information with relevant external security and privacy organizations to stay aligned with industry best practices.

Through continuous risk assessments, internal audits, and a commitment to continual improvement, CIAL Dun & Bradstreet proactively manages internal and external security factors to maintain a resilient and trustworthy environment.

*Note: Certain products and data processes separately covered by Dun & Bradstreet International’s ISMS are excluded from the CIAL Dun & Bradstreet ISMS scope, though we provide those policies and evidences as well for clients, leveraging global solutions.