Security, compliance & how we protect client data
What OutForce is certified for, how your data is handled when our Philippine teams work on your systems, and what we don't claim — in one place for your security and procurement reviews.
Who we are
OutForce is an Australian-owned and managed business process outsourcing (BPO) company, founded in 2018 and headquartered at 4/88 Cumberland St, The Rocks, Sydney NSW 2000. Our delivery teams work from Manila (Ortigas Center and Bonifacio Global City), Cebu and Clark in the Philippines.
We build dedicated offshore teams, not shared seats: each team member works only for one client, on that client's processes and hours. Pricing is the employee's salary plus a fixed OutForce service fee, with no lock-in contract. OutForce handles recruitment, HR, payroll, compliance and facilities.
Certifications
| Standard | What it covers | Status | Proof |
|---|---|---|---|
| ISO/IEC 27001 | Information security management system | Certified | Certificate available on request |
| ISO 9001 | Quality management system | Certified | Certificate available on request |
To request a copy of either certificate, including its scope, issuing body and expiry date, email sales@outforce.com.ph.
How client data is handled
- Your systems, by default. Our team members work inside your own systems and cloud tenant, under the accounts and permissions you control, rather than moving your data into ours.
- Encryption. Sensitive data is protected with end-to-end encryption.
- Trained people. All staff complete ongoing security training.
- Regular audits. Our information security controls are audited regularly.
- Privacy. Our privacy policy sets out how OutForce handles personal information under applicable privacy laws in Australia and the Philippines.
AI tools and your data
Alongside dedicated teams, OutForce offers optional AI and automation services such as an AI receptionist and robotic process automation. These tools only touch your data if you opt in. A dedicated team engagement does not put your data through our AI tools by default.
Facilities & access
- Secure Class A office facilities in the Philippines.
- Biometric access control on entry doors.
- 24/7 security and CCTV.
- Backup power and redundant internet with failover.
- Onsite IT support.
See inside our Ortigas office.
What we don't claim
OutForce does not currently hold a PCI-DSS attestation or a SOC 2 report, and does not claim HIPAA compliance. If your work involves cardholder data or regulated health information, raise it early so we can talk through what your requirements mean for the engagement.
Questions security teams ask us
Is OutForce ISO 27001 certified?
Yes. OutForce is ISO 27001 certified for information security and ISO 9001 certified for quality management. Copies of both certificates, including scope and expiry, are available on request.
Do your staff work in our systems or yours?
By default, in yours. Team members work inside your own systems and cloud tenant, under the accounts and permissions you control.
Do your AI tools touch our data?
Only if you opt in. Our AI receptionist and robotic process automation services are optional, and a dedicated team engagement does not put your data through them by default.
Do you hold PCI-DSS, HIPAA or SOC 2?
No. OutForce does not currently hold a PCI-DSS attestation or a SOC 2 report, and does not claim HIPAA compliance. Tell us early if your work involves cardholder data or regulated health information.
How do I request your certificates or send a security questionnaire?
Email sales@outforce.com.ph with your request or questionnaire and we'll come back to you.
Running a vendor security review?
Send us your questionnaire, or book a call and we'll walk your team through our controls.