Dress Code Simultaneously Acquires ISO/IEC 27001 and SOC2 Type1

Dress Code Inc. (Headquarters: Chuo-ku, Tokyo; CEO: Yuki Ejiri), which operates the workforce management platform "DRESS CODE," acquired the ISMS international standard ISO/IEC 27001 and the SOC2 Type1 report (hereinafter referred to as "SOC2 report") in May 2025. Companies using "DRESS CODE" can now use "ISO/IEC 27001" and "SOC2 reports" to streamline internal control evaluation work in internal and external audits.

What is "ISO/IEC 27001"?

ISO/IEC 27001 is an international standard for Information Security Management Systems (ISMS). It defines an organizational framework for protecting and managing information from the three perspectives of confidentiality, integrity, and availability, and for effectively utilizing information.

What is "SOC2 Report"?

The SOC2 report is a third-party audit report to prove how service providers such as cloud services and SaaS companies protect the safety and privacy of customer data. Independent auditors (accounting firms, etc.) evaluate and report based on standards established by the American Institute of Certified Public Accountants (AICPA). The Type1 report received this time is an assurance report on the evaluation of the design of internal controls at a specific point in time in the "SOC2 report." Our company will also aim to receive the Type2 report in the future, which is an assurance report on the evaluation of the effectiveness of the design and operation of internal controls over a certain period.

Background and Purpose of Acquisition

Since our founding, we have focused on building a global-standard security governance system based on the belief that security is the foundation of growth. In particular, as a provider of SaaS and cloud services related to corporate core operations, we determined that it was essential to establish an environment where customer companies can safely entrust their important information, and we undertook efforts to simultaneously meet strict standards. As a result, we achieved the simultaneous acquisition of ISO/IEC 27001 and SOC2 Type1 in the early stages of our founding.

This acquisition represents our ongoing commitment to security and an important step toward ensuring reliability in the rapidly expanding enterprise market.

Future Outlook

We will continue to build higher security and governance systems while advancing the acquisition of international certifications such as SOC2 Type2 and cloud security standards (ISO/IEC 27017, etc.), providing the highest level of products and services that can meet customer trust. We also aim to provide services that customers can use with even greater peace of mind while complying with domestic and international regulations (GDPR, APPI, etc.).

What is "DRESS CODE"?

"DRESS CODE" is a workforce management platform that eliminates structural friction related to "people and operations." Operations related to "people" within companies, such as human resources, information systems, and general affairs, have different tools, ledgers, and processes for each department, leading to inefficiencies such as dependency on specific individuals, duplicate work, and information fragmentation becoming normalized. It was created to fundamentally review such "friction" and optimize operations comprehensively and sustainably.

Through a product configuration that combines SaaS and marketplace, we approach corporate operational challenges that could not be solved by conventional single-function SaaS. At the core, we have a common architecture and core database, realizing cross-departmental information coordination and business process design across human resources, information systems, and general affairs departments.

Currently, we are developing three series: "HR Force," "IT Force," and "GA Force," with plans to expand to a six-series system covering recruitment, project, and governance areas in the future. Currently implemented in over 130 companies in Japan and Asia, with usage track records in Indonesia, Thailand, Vietnam, and other countries, we will continue to strengthen our products and services to provide essential problem-solving and value creation for users both domestically and internationally.