ESG and Security

Virsae is committed to being a responsible business with regard to climate change and environmental sustainability, global security and data privacy standards. 

At Virsae we make responsible choices with our technology and operations to drive sustainability excellence across our business. We are committed to setting guidelines for how we manage and grow our business with the support of our employees, customers, partners and suppliers. Concern for the environment is an integral and fundamental part of this commitment. Our aim is to reduce the impact on the environment from our operations. 

Environmental, Social, Governance (ESG) 

Virsae has an established ESG-aware strategy, and has strategically chosen to leverage proven sustainability platforms and approaches to maximize our opportunities as a responsible business. 

The Virsae Service Management (VSM) platform is built and run in the cloud, hosted on Microsoft Azure. With Azure as the infrastructure platform Virsae leverages state-of-the-art sustainability technology and economies of scale, in terms of physical infrastructure, physical security, compliance, geographic diversity, and reliability. As Microsoft continues to make significant investments in the ESG and compliance aspects of the Azure platform, Virsae inherits these benefits.  

Azure has certified compliance for all relevant global information security and data privacy standards. Data Privacy is continuously reviewed by Virsae to accommodate international requirements, with GDPR being a fundamental benchmark, along with specific privacy legislation in New Zealand, Australia and the United States.

Similar to Virsae using Azure as an infrastructure platform, Virsae Head office is located in the B:Hive, one of Auckland’s ground-breaking business parks in terms of environmental awareness and sustainability objectives. The B:Hive facility provides an office environment for Virsae that actively manages and measures environmentally related consumption, with the goal of reduction and optimization.

Environmental

In the New Zealand regulatory context, Carbon Emissions reporting is not yet required for all business, however, Virsae is in the process of establishing a formal Carbon Footprint measurement program. We recognize that many of our customers want to – or are mandated to – establish a supply chain that reinforces their own climate change and ESG initiatives. We believe we are already in a healthy position with regard to our carbon footprint and will prioritize our carbon program, aligned with New Zealand government recommendations.

Social

Virsae is an inclusive and non-discriminatory employer. Virsae significantly broadened its training content capability for staff in 2023, and offers health insurance to employees within remuneration packages. Our social goals are achieved by encouraging and allowing staff to take time to pursue initiatives that are meaningful to them and have relevance in their own local communities. As a SaaS provider, Virsae does not have significant physical (human) presence in our customer localities outside New Zealand. 

Governance

Virsae is continuously improving its cyber-security position, taking advantage of Azure native capability for both tooling and compliance reporting. Virsae's structured staff training capability provides further content for a range of cyber-security and socially oriented courses. Virsae’s governance program includes regular review of the policy library and compliance across the related aspects of information security. A key component of Virsae’s internal governance is the Information Security Management System (ISMS) that is based on the ISO 27001 guidelines.

View our current ESG report here.

Security

Virsae is continuously improving its cyber-security position, taking advantage of Azure native capability for both tooling and compliance reporting.

In addition to our Azure certified compliance, we regularly demonstrate compliance with applicable local standards for our customers in multiple international jurisdictions. 

Virsae's Information Security Management System (ISMS) is based on the ISO 27001 guidelines. 

Assessed and Certified Secure by:

• CyberGRX 
• TX-RAMP
• KY3P

We also look to demonstrate compliance through certification programs.

Certifications currently under assessment include:

• TX-RAMP
• IRAP/ISM
• ISO 27001

Please contact us for our Information Security Privacy policy documents.