Certifications, Awards, Commitments and Partnerships
Safeguarding what you value is our priority. We not only abide by the strictest industry standards—we help set them. Our industry memberships, certifications and awards keep us ahead of new developments so we can innovate for our customers.
Certifications, Awards, Commitments and Partnerships
Safeguarding what you value is our priority. We not only abide by the strictest industry standards—we help set them. Our industry memberships, certifications and awards keep us ahead of new developments so we can innovate for our customers.
AWARDS/Recognition
We received a 100% on the Human Rights Campaign Corporate Equality Index for the fifth year in a row
2021 Google Cloud Customer Award Winner
Iron Mountain is listed on the FTSE4Good Index for meeting globally recognized corporate social responsibility standards.
We rank 605th on
Fortune Magazine’s Fortune 1000.
Fortune Magazine’s Fortune 1000.
We’re a member of the S&P 500 Index, the leading bellwether of the U.S. equities market.
We are recognized as a PRIVACY+ certified organization by i-SIGMA
As a Participating Organization, Iron Mountain adds its voice to the standards development process and collaborates with other Participating Organizations to improve payment security worldwide.
Iron Mountain received the SSON Shared Services Award in 2021.
Commitments
Iron Mountain is proud to be one of the 11 founding members of the newly named Veteran Jobs Mission, a coalition of companies aiming to hire a total of one million U.S. military veterans.
Our GHG emissions reduction goal was approved by SBTi in 2019. Using 2016 as a baseline, our aim is to reduce absolute GHG emissions 20 percent by 2025.
On June 4, 2018, Iron Mountain joined the RE100 and committed to 100 percent renewable energy and to reduce greenhouse gas emissions to help meet the Paris Climate Accord.
In 2016 Iron Mountain announced that our data center business unit joined the U.S. Department of Energy (DOE) Better Buildings Initiative as a Challenge Partner.
In order to reach our environmental impact goals Iron Mountain is proud to be a member of organizations like the Clean Energy Buyers Association, Sustainable Brands and The United Nations Global Compact.
Iron Mountain understands the value of transparency and public reporting on our environmental, social and governance, ESG, impacts. We report to a number of different frameworks each year, including The Global Reporting Initiative, CDP and others.
Iron Mountain is committed to leveraging our global scale to make a positive difference on the communities in which we work. As a signatory to the United Nations Global Compact we are committed to the Sustainable Development Goals.
Top Scorer on 2022 Disability Equality Index (DEI)
Industry Memberships/Partnerships
- i-SIGMA (International Secure Governance & Management Association) – we’re a founding member of this professional body for information management vendors (formerly PRISM (Professional Records & Information Services Management).
- Shared Assessments – Iron Mountain is a long time member of the Shared Assessments program and sits on the steering committee. Shared Assessments is dedicated to developing standardization and best practices in the field of third party risk management.
- CEBA – we are a member of the Rocky Mountain Institute’s Business Renewable Center and the Clean Energy Buyers Association (CEBA). Combined, our commitments to wind and solar power make the company one of the top 25 buyers of clean energy among the FORTUNE 1000 and a top 70 energy buyer in the Environmental Protection Agency Green Power Partnership.
Certifications/Audit Reports
- Service Organization Control (SOC) 3 Report, formerly SysTrust®, from the American Institute of Certified Public Accountants (AICPA) – an audit of our IT systems by an outside, independent auditor to ensure we have appropriate internal controls in place for our IT infrastructure environment. Our SOC certification is based on three Trust Services Principles: (1) Security, (2) Confidentiality, and (3) Availability. Each principle is supported by well-defined and detailed criteria that encompass an organization's infrastructure, software, people, procedures and data. Download the Service Organization Control (SOC) 3 Report here.
- Service Organization Control (SOC) Type 2 Report from the AICPA – Iron Mountain also maintains a non-public SOC 2 Report. If needed, please work with your account representative to obtain this report.
- NAID AAA certification from i-SIGMA
- Privacy+ certification from i-SIGMA.
- PCI-DSS Attestation of Compliance (AOC) based on the Payment Card Industry Data Security Standard – If needed, please work with your account representative to obtain this attestation.
- ISO/IEC 27001:2013 Certification, which establishes common Information Security Management Systems (ISMS) controls and procedures for Iron Mountain InSight® running in a secure cloud hosted environment.
- FedRAMP, Iron Mountain InSight has achieved FedRAMP Ready status, as approved by the Federal Risk and Authorization Management Program (FedRAMP).
Iron Mountain is licensed by the New Jersey Office of Consumer Affairs, license NJPM001200. The permanent place of business in NJ is 526 Route 46, Teterboro, NJ.