Strengthening Information Security
First written in FY2020. 4 of 5 entries say "Advanced", first in FY2021. Latest entry: FY2026.
The whole theme swung hardest in 2019: 2 of 20 companies on the "Worse" side.
31 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「For products provided to customers, we conduct vulnerability assessments, penetration testing and incident response exercises led by RedTeam, a specialist information security organisation, to identify vulnerabilities at an early stage and prevent security incidents resulting from cyberattacks.」
In addition to the existing SOC 1 Type 2, PCI DSS and TRUSTe measures, describes RedTeam-led vulnerability assessments, penetration testing and incident response exercises. - 2026-05-13AdvancedEarnings presentation
「We provide an independent workspace for each client company and strictly separate data such as authentication credentials and context.」
Specifies security measures for AI agents, including client-by-client data separation and management of authentication credentials. - FY2024AdvancedAnnual report
「We have also established an information security policy and provide employees with ongoing training.」
The scope and methods of security measures have been specified, including SOC 1 Type 2 for freee Accounting and freee Invoicing, PCI DSS for freee Card Unlimited, and vulnerability assessments and penetration testing by PSIRT. - FY2021AdvancedAnnual report
「For freee Accounting, in addition to obtaining the international assurance reports SOC 1 Type 1 and SOC 1 Type 2, we have passed security checks conducted by partner financial institutions and by the Financial Services Agency when registering as an electronic payment agency. We have also obtained TRUSTe certification, an international certification relating to the protection of personal information.」
Adds specific details on the information management framework, including SOC 1 Type 1 and Type 2, security checks by financial institutions and the Financial Services Agency, and TRUSTe certification. - FY2020First statedAnnual report
「The company will continue to provide internal education and training and strengthen and enhance its systems.」
Identifies a dedicated information security team, an information security policy, employee education and training, and system enhancements as measures to protect information assets.