Droit Expands Cloud Data Privacy Safeguards with ISO 27018 Certification

Droit, a RegTech firm best known for applying computational law to complex financial regulation, has added another layer of assurance to its cloud services. The company has achieved ISO/IEC 27018:2019 certification, an international benchmark for protecting personally identifiable information (PII) in public cloud environments.

This new certification sits alongside Droit’s existing ISO/IEC 27001:2022 and ISO/IEC 27017:2015 credentials, both of which were recently renewed. Together, the trio provides a framework that strengthens security and privacy practices for global financial institutions moving more of their infrastructure to the cloud.

Why ISO 27018 Matters

Data privacy is a regulatory priority across markets. ISO/IEC 27018 was developed specifically to help cloud service providers demonstrate that they manage personal data responsibly and in line with evolving global rules. Importantly, the standard aligns with the EU’s General Data Protection Regulation (GDPR), covering how organizations process and safeguard personal data.

Kaveh Moravej, Head of Information Security at Droit, said, “ISO 27018 is the world’s best-known privacy standard for the cloud and is a natural evolution from our ISO/IEC 27001 and ISO/IEC 27017 certifications. To successfully achieve ISO 27018, we augmented our existing security and privacy programs. This included working across the business on new protocols and raising awareness to ensure all the requirements of the standard were met. We are now able to more easily address existing and future, ever-changing global data privacy regulations and give our clients the confidence that we are fully aligned with their data privacy needs.”

For financial institutions, independent certifications are a form of assurance. They help firms demonstrate compliance while relying on vendors like Droit for cloud services. The external audit process confirmed that Droit’s controls meet internationally recognized benchmarks.

Peter Bals, Chief Technology Officer at Droit, said, “Droit’s ISO certifications underscore our commitment to the safeguarding of both cloud security and data privacy to build trust with the global financial institutions we serve. Achieving ISO 27018 provides independent validation of our focus on security and cements our position as a major cloud services provider. These best practice controls are integral to supporting clients on their cloud journeys.”

Broader Context

Droit’s step reflects a broader industry trend: as financial services continue to migrate sensitive processes into public cloud environments, clients expect not only robust security but also compliance with a patchwork of privacy regulations worldwide. Independent standards like ISO 27018 offer a common baseline, reducing complexity for firms operating across multiple jurisdictions.

By layering ISO 27018 onto its existing security certifications, Droit signals that its cloud services are designed with both resilience and regulatory alignment in mind – a factor that increasingly influences vendor selection in regulated financial markets.

Droit was audited by an external, independent, and accredited team as part of the ISO certification process.

CITGO Petroleum Implements Behavox Platform for Regulatory Archiving and Communications Surveillance

Behavox, the AI-powered communications surveillance provider, has announced that CITGO Petroleum Corporation has gone live with its platform for Regulatory Archiving and Communications Surveillance. CITGO, a major U.S.-based oil refiner, adopted the solution to strengthen its compliance programme and address evolving regulatory risks.

With the new platform, CITGO gains access to AI-driven risk policies, high-quality alerts, and advanced testing tools aimed at improving both protection and operational efficiency. Behavox deployed a dedicated implementation team to ensure rapid onboarding while minimising the workload for CITGO’s staff.

The launch highlights Behavox’s growing presence in the energy and commodities sector, where more organisations are seeking intelligent, scalable solutions to meet complex compliance requirements and operational challenges.

ISS Stoxx Acquires Geospatial Climate, Nature Risk Analysis Firm Sust Global

Geospatial risk modelling and analytics provider Sust Global has been acquired by ISS Stoxx to be incorporated into its Sustainability Business.

Sust’s geospatial artificial intelligence engine analyses and seeks to find climate and nature patterns within geographical regions.

“This acquisition helps to underline our commitment to helping you better manage sustainability-related risks and uncover opportunities,” said Till Jung, Global Head of Sustainability Business.

S&P Global’s iLevel Private Markets Tool Updated with Document Search

S&P Global Market Intelligence has updated its private asset portfolio management capabilities with the launch of iLevel Document Search, an artificial intelligence-powered tool that can extract insights from a variety of unstructured data sources.

The latest augmentation of the iLevel suite has includes natural language querying, annotations for traceability and permissions-based search results for confidentiality.

“We’re moving from an era of portfolio monitoring to one of portfolio intelligence,” said Christopher Sparenberg, Head of iLEVEL, S&P Global Market Intelligence. “With deal flow at multi-year lows and exit windows tightening, the firms that will thrive are those that can unlock the ‘unknown unknowns’ in their existing portfolios to create differentiated value. iLEVEL Document Search enables investment teams to discover new opportunities and identify risks to make decisions with conviction.”

FIX Publishes MMT 5.0 to Support Readiness for the European Consolidated Tape

The FIX Trading Community has released Market Model Typology (MMT) 5.0 to help firms prepare for the pending European consolidated tape. MMT is the independent industry data standard for classifying trades across European capital markets, enabling consistent interpretation of published transactions and supporting clean, transparent market data. FIX Executive Director Jim Kaye said FIX’s independent, industry-run governance ensures MMT reflects the needs of all market participants.

Developed in 2012 by the Federation of European Securities Exchanges and handed to FIX in 2013, MMT is now used by all major European trading infrastructure venues and the majority of market participants. FIX’s MMT Steering Committee has worked with European regulators since 2013 to keep the standard aligned with evolving regulations and user requirements, underpinning market efficiency and transparency.

MMT 5.0 addresses the revised post-trade transparency requirements of MiFIR RTS 1 and RTS 2 and introduces additional voluntary flags. These optional fields are designed to further enhance transparency for users seeking deeper insight into European capital markets.

XTX Markets Commissions YIT for Second Kajaani Data Centre Build, but Long Term Plans Remain Uncertain

Algorithmic trading firm XTX Markets has signed an agreement with YIT Corporation for the construction of a second data centre at its Kajaani campus in Finland. The project will see YIT deliver the shell and core of the facility, continuing its work from XTX’s first data centre on the site. The contract value has not been disclosed.

While construction is set to begin, XTX noted that its longer-term campus expansion plans remain uncertain due to proposed changes in electricity taxation. Chief Operating Officer Mike Irwin highlighted the strong partnership with YIT and the progress of the company’s data centre strategy, but stressed the need for policy clarity before committing to future development phases. XTX expressed hope for continued collaboration with Finnish partners once the investment outlook is resolved.

SIX Expands Use of Pico’s Corvil Analytics to Enhance Market Data Monitoring

Pico, the global provider of technology services, software, data and analytics, has announced that SIX, the global financial data and infrastructure provider, is expanding its integration of Pico’s Corvil Analytics to include monitoring across its financial information business. Corvil Analytics delivers real-time monitoring of price data without performance loss, offering capabilities such as gap detection, latency tracking, and microburst analytics.

Previously applied to SIX’s exchange operations, this broader adoption aims to strengthen its oversight of high-volume, low-latency data flows across multiple market sources to help identify data integrity issues and support faster issue resolution for SIX’s operations.

Informatica Adds New Features to its IDMC

Data management and integration specialist Informatica has updated its Intelligent Data Management Cloud (IDMC) platform to make it easier for users to utilise artificial intelligence-ready data.

The company, which is in the midst of a takeover by Salesforce, said the new release of IDMC includes features across data integration, governance, quality, master data management and integration platform as a service (iPaaS).

Acuity in ‘World-First’ Deal to Bring Databricks’ DIP to Clients

Acuity Knowledge Partners’ 650-plus financial services clients will be able to use the Databricks Data Intelligence Platform to automate data-driven workflows and decision making in what the company has described as a “world-first deal”.

“Acuity is the first firm of its kind to bring Databricks to market for financial services firms,” said Jon O’Donnell, Chief Operating Officer of Acuity Knowledge Partners.

Thoma Bravo and 7RIDGE Partner to Drive Next Phase of Trading Technologies’ Growth

Trading Technologies International, Inc. (TT), the global provider of capital markets technology, has announced a strategic partnership between its current owner, 7RIDGE, and Thoma Bravo, a leading software investment firm. This move follows a thorough search for an investment partner to support TT’s next phase of expansion. 7RIDGE initially acquired TT in December 2021.

Thoma Bravo, managing approximately $184 billion in assets as of March 2025, brings extensive experience in software and technology investments. The firm will collaborate with TT and 7RIDGE to apply sector-specific knowledge and operational strategies aimed at accelerating TT’s growth. Financial details of the deal have not been disclosed, and the transaction is expected to close in the fourth quarter of 2025, pending regulatory approval.