# Security How we approach security at Synthesia. Explore our policies, certifications, processes, and engineering practices that help safeguard customer data and maintain a secure platform. **Scaling Vulnerability Management with AI: What Actually Worked** How Synthesia built an AI-powered vulnerability management program to scale InfoSec: automating triage, validation, and fixes across SAST and SCA to reduce backlog and ship faster. **Synthesia is now ISO 27001 certified, here’s why that matters** At Synthesia, security isn’t a box we tick, it’s one of the core pillars of our enterprise platform. That’s why I’m proud to announce that we’re now ISO/IEC 27001:2022 certified, the internationally recognized standard for information security management. **How we solved a DMARC mystery at Synthesia** Today, we want to share how this principle is reflected in practice by describing the journey to solve a perplexing email issue reported by one of our customers, the root cause of which was both challenging and enlightening. **Synthesia’s content moderation systems withstand rigorous NIST, Humane Intelligence red team test** We're sharing the results from Synthesia's first public red team test organized by NIST and Humane Intelligence, as part of our efforts to prevent the creation of non-consensual deepfakes and harmful content. **Our journey to becoming the world's first ISO 42001-compliant AI video company** Today, we're excited to announce that Synthesia is the world's first AI video company to achieve ISO/IEC 42001 certification, as verified through a comprehensive external audit that was just completed this month by security experts from A-LIGN.