TISAX® Assessment Level 2 at LamaPoll
LamaPoll protects data and information to the highest standard, and this has been officially confirmed. In addition to our ISO 27001 certification, LamaPoll holds the TISAX® label at Assessment Level 2 (high protection needs). We were first awarded it in April 2022 and have kept it current ever since. For details of our security concept, please contact our support team.
Table of Contents
What is TISAX®?
TISAX® (Trusted Information Security Assessment Exchange) is an assessment and exchange mechanism for manufacturers, service providers and suppliers across the automotive supply chain. It is operated by the ENX Association on behalf of the VDA.
In plain terms: the VDA (German Association of the Automotive Industry) has defined standard criteria that companies must meet to keep confidential information secure. On the TISAX® platform, companies can arrange assessments (audits) and share the results, the so-called TISAX® label, with their partners.
What does TISAX® have to do with online surveys?
LamaPoll is mainly used for employee and customer surveys and for market research. These surveys regularly involve sensitive, confidential data with high or very high protection needs, which is collected and analysed on our platform. Every organisation is rightly concerned about keeping that data secure. With TISAX®, you can rely on the independent results of external auditors, in our case TÜV SÜD, without having to run extensive checks of your own.
LamaPoll survey software with the TISAX® label
TISAX® sets the standard for information security management systems (ISMS) in the automotive industry. LamaPoll is, of course, not an automotive supplier, and our ISMS is already externally certified (ISO/IEC 27001, 27017 and 27018 by TÜV SÜD). However, many of our customers have strict data protection and security requirements, and the automotive industry plays a major role in our home market, Germany. That is why we decided to take part in TISAX® and have the security of our survey software assessed externally once more through its rigorous audit.
TISAX® objectives, criteria and requirements for the security of your surveys
A TISAX® objective or control question usually sounds brief and general, for example: “To what extent is the use of cryptographic procedures managed?” Behind it, however, there can be dozens of requirements. Most of them cannot simply be ticked off; they call for complex processes and recurring tasks. This means the protection of your survey data is looked at as a whole. We have to explain not only that we encrypt your data, but how we do it, how encryption is monitored, how we back up data, how we restore your survey data after an outage, how we stay informed about new encryption methods and vulnerabilities, how we handle security incidents affecting your data, how all of these processes are monitored, and much more.
What does this mean for you?
If you work in the automotive industry, you can use LamaPoll to process information with high protection needs (for example, data classified as confidential). Whether you run employee surveys, supplier surveys, feedback or product studies, using our survey tool helps you demonstrate that security standards are maintained throughout your supply chain, including your service providers.
If you are not in the automotive industry, you can of course continue to create, run and analyse online surveys with LamaPoll. The security and protection of your data have once again been assessed externally and confirmed against additional strict requirements. After all, TISAX® requirements apply just as well to other sectors: data needs protecting, whether it concerns components, car bodies, employees, customers, suppliers, bananas or apples. Your data is safe!
TISAX® assessment results
Lamano GmbH & Co. KG first passed the TISAX® assessment in April 2022 and has kept the label current ever since. The assessment results are not intended for the general public. Registered companies can access them via the TISAX® portal.
- Scope ID: S3YVW2
- Assessment ID: A5MFN1-1
- Assessment objectives: confidential information (high protection needs), high availability, data protection as a processor (Art. 28 GDPR)
TISAX® is a registered trademark of the ENX Association.
Together with the Federal Office for Information Security (BSI), we conducted a security survey for the first time. The participating companies had high requirements for data protection, cybersecurity and anonymity. LamaPoll met them very well, both technically and organisationally. A contact person was also available whenever needed. We are extremely satisfied with the cooperation.
Questions for our team?
We are happy to answer any questions about security at LamaPoll.
Feel free to get in touch.
