Compliance frameworks, security audits, and quality certifications this company maintains.
CGI maintains ISO 27001 certification across its global delivery centers and managed services operations, providing enterprise and government clients with assurance that CGI information security management practices meet international standards for protecting sensitive client data.
CGI holds SOC 2 Type II certification for its managed IT and application services delivery, enabling CGI clients in financial services, healthcare, and government to satisfy their own audit and compliance obligations for third-party IT service providers.
Regulatory
FedRAMP Authorized
CertifiedCGI Federal maintains FedRAMP authorization for its cloud-based government solutions including CGI Momentum, enabling US federal agencies to adopt CGI managed cloud services with pre-approved security controls under the FedRAMP program.
CGI delivery centers hold Capability Maturity Model Integration Level 5 certification, the highest CMMI rating, reflecting CGI quantitatively managed and continuously optimizing software development and delivery processes for government and defense clients.
CGI global operations are ISO 9001 certified for quality management systems, demonstrating consistent processes for delivering IT consulting and managed services that meet client specifications and regulatory requirements across 40+ countries.
CGI is fully GDPR-compliant across its European operations, with dedicated data protection officers in each EU member state where CGI operates and contractual safeguards governing the processing of personal data on behalf of financial services and government clients.
Regulatory
PCI DSS Level 1
CertifiedCGI holds PCI DSS Level 1 Service Provider certification for financial services engagements involving payment card data, enabling CGI to deliver managed services and application development for banking and retail clients processing cardholder transactions.
CGI complies with Canada PIPEDA privacy legislation for personal information collected and processed on behalf of Canadian federal agency and commercial clients, with privacy impact assessments conducted for all CGI systems handling Canadian citizen data.
CGI holds NATO Secret facility clearance enabling the company to deliver classified technology programs for NATO member nations, including the HERMES secure mobile communications project and defense intelligence system integration work.
CGI maintains ISO 14001 environmental management certification across its global delivery center network, supporting the company commitment to reducing energy consumption and carbon emissions from data center and office operations in pursuit of its net-zero goals.