ISO/IEC 27001:2022 certification

Bureau Veritas Certification Chile S.A. audited the bheed Information Security Management System and certified that it meets the requirements of ISO/IEC 27001:2022, the international standard for managing information security systematically.

Scope of certification

The ISMS applies to the software support and maintenance service for real estate businesses, delivered through the bheed digital platform, which allows projects to be managed end to end, from the initial construction stage through handover and after-sales services, ensuring the confidentiality, integrity and availability of the information managed.

The scope and validity of the certificate can be checked directly with the certification body.

Read the article about the certification
ISO/IEC 27001
Standard
ISO/IEC 27001:2022
Certification body
Bureau Veritas Certification Chile S.A.
Certificate no.
BVCSG15804
Holder
Datcapital Tecnología SpA (tax ID 77.088.278-8), the company behind bheed
Certification date
April 7, 2026
Validity
Until April 6, 2029, subject to the continued satisfactory operation of the management system

Information Security Policy

Document DR.PO.1 · Version 1 · Effective since March 5, 2026

bheed develops, operates and maintains the platform our clients use to manage the full lifecycle of their real estate projects. Given the role it plays in their operations, information security is a pillar of ours. The policy sets the framework for protecting that information and continually improving the ISMS.

Who it applies to

All systems, services, processes, employees, suppliers and third parties with access to information processed by bheed or to the environments we use to operate.

Who is accountable

  • Executive management provides the resources and sets the strategic guidelines for the ISMS.
  • The ISMS team coordinates, supervises and evaluates the implementation of controls and their effectiveness.
  • All employees and third parties must comply with the policy and the procedures derived from it.

Our commitments

  1. Protect the confidentiality, integrity and availability of our own information and that of our clients, suppliers and users.
  2. Ensure the operational continuity of the platform and of the support and maintenance services we provide to the real estate sector.
  3. Manage cybersecurity, secure development, cloud operations and technical support risks, with controls proportional to industry threats.
  4. Comply with the legal, contractual, regulatory and statutory requirements that apply to our operations and to data processing.
  5. Develop securely, with practices aligned to standards such as OWASP and DevSecOps.
  6. Promote a security culture, with clear responsibilities and continuous training for our team.
  7. Maintain and continually improve the ISMS by reviewing results, incidents, audits, risks and opportunities.

Privacy and Use Policy

It describes what information Datcapital Tecnología SpA collects through the website, the app and its services, how it uses and protects it, and what rights users have, in accordance with Chilean Law No. 19,628 on the protection of private life.

What data we collect

When registering, an individual provides their first and last names, email, national ID number, date of birth and a password. A company provides its legal name, tax ID and address, along with the details of its legal representative.

What we use it for

To verify users’ identity, provide the services, improve the platform and answer questions. We only contact you about products or promotions if you have given your consent, and we do not keep information longer than needed for the purpose it was collected for, except for legal or legitimate business reasons.

Who we share it with

We do not sell or rent personal information. We only share it in the cases the policy sets out: with related companies, with providers that process data on our behalf, with web analytics tools, with authorities that request it through due legal process, and with third parties when you authorize it.

Your rights

You can request access to your data, ask for it to be corrected if it is inaccurate or out of date, have it deleted where applicable, and object to its use for statistical purposes. To exercise these rights, write to us at info@bheed.io or through our contact page.

If the policy changes, we notify each user when they sign in to the platform and ask them to accept the new version to keep using it.

This summary does not replace the full document, which is the one that governs. The full policy is available in Spanish.

Need documentation to assess bheed as a vendor?

If your security or procurement team needs more information, let’s talk.

Contact the team