Sigma Software Security

BACKGROUND

Please describe your company and position.

I am the CIO & EVP of DanAds

Describe what your company does in a single sentence.

Tech company delivering solutions to the global media industry

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sigma Software Security to accomplish?

• DanAds required ISO 27001 and SOC 2 certification as the platform scaled to serve major publishers (Hearst, Bloomberg, Tripadvisor, SoundCloud). Our goal was to progress the company toward both certifications by tightening documentation, processes, and policies to meet each standard's requirements.
• Embed security into the platform's AWS migration rather than retrofitting it afterward - applying the shared responsibility model and validating posture through ongoing audits.

SOLUTION

How did you find Sigma Software Security?

Other

Why did you select Sigma Software Security over others?

Referred to me

How many teammates from Sigma Software Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Summary: Since 2019, Sigma Software has been an indispensable partner in strengthening our security posture and driving our compliance initiatives. They have consistently delivered high-caliber technical expertise and strategic guidance to help us achieve and maintain rigorous ISO 27001 and SOC 2 Type II certifications. Their team demonstrates deep domain knowledge in cybersecurity governance, proactive risk management, and audit readiness. Communication is always transparent, reliable, and seamlessly integrated with our internal teams. We highly recommend Sigma Software to any organization looking for a trusted, long-term cybersecurity and compliance partner.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

ISO 27001- and SOC 2-aligned documentation and processes established, security controls embedded into AWS migration, enterprise publisher relationships sustained through scaling.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Sigma Software’s project management and delivery have been exemplary throughout our multi-year collaboration. They consistently deliver compliance milestones and security deliverables on time, ensuring smooth, stress-free ISO 27001 and SOC 2 Type II audit cycles. Their team is remarkably responsive, adapting swiftly to evolving regulatory and technical demands while maintaining clear, transparent communication. They operate not just as an external vendor, but as a trusted, seamless extension of our internal team.

What was your primary form of communication with Sigma Software Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stands out most about Sigma Software is their ability to translate rigorous, complex compliance frameworks (ISO 27001, SOC 2 Type II) into pragmatic, engineer-friendly security practices. They don’t treat compliance as a periodic audit checklist—they bring proactive ownership, anticipating risks and keeping our systems audit-ready year-round. Their deep technical domain knowledge paired with their true sense of long-term partnership makes them exceptionally rare in the consulting space.

Are there any areas for improvement or something Sigma Software Security could have done differently?

Honestly, very little comes to mind. Throughout our multi-year partnership, any minor blockers or scheduling adjustments were addressed proactively and resolved with zero impact on our audit deadlines or security posture.