Sage

Finance & Payments United Kingdom Website Reviewed Sept. 2, 2026

UK-headquartered accounting, payroll and HR software including Sage Business Cloud, Sage 50, Sage 200 and Sage Payroll.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body Certification scope varies by Sage product and region - confirm the certificate covering the specific product you use Current
SOC 2 Type II Independent third-party auditor Available for selected Sage cloud products; confirm coverage for your product with Sage Current

Compliance Frameworks

ISO/IEC 27001:2022
Partial
Certification scope varies by Sage product line - verify the certificate covering your product
SOC 2 Type 2
Partial
SOC 2 reporting available for selected Sage cloud products only
GDPR 2016/679
Full
UK GDPR terms and DPA published in the Sage trust centre
Cyber Essentials
Partial
Verify current Cyber Essentials status with Sage for your product and entity

Assess Sage in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.