# Privacy

Safeguarding privacy has long been a priority for our customers. We apply strict standards to the collection, use, and management of personal data.

## Data Privacy Program

To respect user privacy and securely manage personal data in compliance with the EU’s General Data Protection Regulation (GDPR) and other data protection regulations, we maintain a comprehensive Data Privacy Program that includes a dedicated Group Data Protection Officer, company-wide training, and ISO 27001 and ISO 27701 certifications.

[Learn how we protect personal data](/personal-data-protection)

## Data Privacy Commitments

Our policies, controls, and data handling practices demonstrate a structured approach to protecting personal data in line with global regulations.

## Privacy Policy

Our Privacy Policy details individuals' rights and outlines how we collect, use, and protect personal data across our websites and solutions.

[Review the Privacy Policy](https://discover.3ds.com/privacy-policy)

## Data Processing Exhibit \[DPE\]

The DPE outlines the terms under which we process personal data on behalf of our customers, in accordance with GDPR and other applicable data protection laws.

[Download the Data Processing Exhibit](https://assets.3ds.com/Terms/SupportPolicies/Data_Processing_Exhibit_V1.4_-_04012023.pdf)

## Technical and Organizational Measures \[TOMs\]

To protect personal data processed through our cloud solutions, we implement comprehensive and risk-based TOMs that are regularly updated to reflect evolving security standards and best practices.

TOMs are available in our Knowledge Base to authorized users with a 3DPassport account.

[Access the TOMs](https://support.3ds.com/knowledge-base/?q=docid:QA00000055547)

## Sub-processors

In line with GDPR and other privacy regulations, we publish and regularly review a list of approved sub-processors involved in the processing of personal data within our cloud solutions. Customers can subscribe to receive updates.

The sub-processors list is available in our Knowledge Base to authorized users with a 3DPassport account.

[Access the Sub-processors List](https://support.3ds.com/knowledge-base/?q=docid:QA00000054982)

## Data Privacy Resources

Review our privacy-related certificates and whitepapers.

## ISO/IEC 27701:2019 PIMS Certified for 3DEXPERIENCE platform SaaS

The Privacy Information Management System for the **3D**EXPERIENCE platform on the cloud is certified to ISO/IEC 27701:2019 when Dassault Systèmes acts as a controller and processor of personal data.

3DEXPERIENCE platform

[Download the certificate](https://www.3ds.com/assets/invest/2025-04/dassault-systemes-iso-iec-27701-2019.pdf)

## ISO/IEC 27018:2019 Certified PII controls for the 3DEXPERIENCE platform SaaS

The Privacy Information Management System for the **3D**EXPERIENCE platform on the cloud is certified for controls that protect personally identifiable information (PII) in public cloud services when acting as a PII processor.

3DEXPERIENCE PLATFORM

[Download the certificate](/media/23981)

## ISO/IEC 27701:2019 PIMS Certified for BIOVIA ScienceCloud

The Privacy Information Management System for BIOVIA ScienceCloud is certified to ISO/IEC 27701:2019 when Dassault Systèmes acts as a processor of personal data.

BIOVIA SCIENCECLOUD

[Download the certificate](/media/20205)

## Cloud Security & Privacy Whitepaper

We safeguard the **3D**EXPERIENCE platform through a Secure Software Development Lifecycle (SSDLC), GDPR-aligned practices, MFA, DAST/SAST, and a Shared Responsibility Model for cloud-based solutions.

3DEXPERIENCE platform

[Download the whitepaper](https://www.3ds.com/assets/invest/2025-04/3ds-whitepaper-cloud-security-privacy.pdf)

 ![Privacy hero banner](https://www.3ds.com/assets/invest/2025-02/trust-center-privacy-hero-banner2.jpg)