Building trust in a digital world: why security matters at Esri Canada

In today’s hyper-connected world, digital trust is everything. Whether you're a municipal planner using Esri Canada’s cloud-based mapping tools or a national agency managing critical infrastructure, you need to know your data is safe. At Esri Canada, we recognize that trust must be earned through continuous, consistent action. Accordingly, we have established security as a fundamental element of our organizational identity.

Beyond compliance, our pursuit of ISO certifications demonstrates Esri Canada’s commitment to transparency at its core—security best practices across the whole organization, and continuous improvement. We have achieved the following certifications:

ISO/IEC 27001: The gold standard for Information Security Management Systems (ISMS), ensuring our approach to managing sensitive data is structured, risk-based and continuously evolving.

ISO/IEC 27017: Focused on cloud-specific security controls, this certification clarifies the shared responsibilities between cloud service providers and customers, which are critical in today’s SaaS-driven world.

ISO/IEC 27018: Dedicated to protecting personally identifiable information (PII) in the cloud, this certification reinforces our unwavering commitment to privacy and managing sensitive data throughout its lifecycle.

These certifications are especially relevant for clients using Esri Canada’s Software-as-a-Service (SaaS) applications hosted on the cloud. They can rest assured that their data is protected by industry-leading security controls.

What this means for you

Whether you're a business leader, IT professional, public sector decision maker or customer, our security posture directly benefits you.

• Data protection you can count on: Your data is encrypted at rest and in transit, protected by multi-factor authentication and governed by role-based access controls.

• Cloud confidence: Our cloud infrastructure is designed for incident response, disaster recovery and business continuity, ensuring your services remain secure and available, even in the face of disruption.

• Privacy by design: We embed privacy into every layer of our operations.

• Operational excellence: Through regular internal audits, employee training and continuous improvement, we foster a culture where security is second nature, and everyone plays a role.

• AI with integrity: As we step into a future where artificial intelligence is heavily integrated, we apply rigorous security reviews and governance to ensure responsible innovation while maintaining data protection.

• Business enablement: Esri Canada delivers secure, scalable solutions that drive operational efficiency and innovation.

Living our values

At the heart of our security program are Esri Canada’s core values: empowerment, sustainability and leadership. These principles guide how we design systems, protect data and respond to emerging threats.

• Empowerment drives our commitment to proactive security. We equip our teams with the tools, training and autonomy needed to identify risks early and respond effectively.

• Sustainability guides our long-term approach to security. By embedding privacy and protection into the lifecycle of our solutions, we ensure resilience and reliability for our clients.

• Leadership is reflected in our pursuit of internationally recognized certifications and our dedication to continuous improvement.

To ensure our controls are effective in real-world scenarios, we conduct regular internal audits, cloud infrastructure reviews and incident response tabletop exercises. These efforts reflect our belief that security is a continuous journey, one where we improve every single day.

What’s next?

As we look ahead, we’re exploring new certifications, enhancing our Trust Centre and expanding our security training programs. We’re also working to ensure that every solution Esri Canada delivers meets the highest standards of security and privacy.

Visit our Trust Centre

Go to esri.ca/trust to explore our certifications, privacy practices, security controls and more. It’s your one-stop hub for understanding how we all work together to keep your information safe.