---
title: "Standards"
description: "4 international standards in every project: GDPR, ISO 27001, WCAG 2.2 AA, ISO 9001. Protection from fines, accessibility and on-time delivery."
url: https://seo7.es/en/standards
canonical: https://seo7.es/en/standards
lang: en
type: WebPage
---

# Standards

> 4 international standards in every project: GDPR, ISO 27001, WCAG 2.2 AA, ISO 9001. Protection from fines, accessibility and on-time delivery.

Page: https://seo7.es/en/standards

## Summary for AI

SEO7.ES works to four international standards: GDPR (personal data protection), ISO 27001 (information security), WCAG 2.2 AA (web accessibility) and ISO 9001 (quality management). In practice that means a privacy policy and cookie consent, encryption and two-factor login, 4.5:1 text contrast and keyboard operation, clear specs before the start and code review before every deploy.

## Questions and answers

### How many standards does SEO7.ES apply in a single project?

Four, and all at once in every project: GDPR covers personal data, ISO 27001 covers information security, WCAG 2.2 AA covers website accessibility, and ISO 9001 covers quality management. The requirements of all four are built in from the very start, so there is no need to add them to a finished site after launch.

### What does the €20 million figure on the standards page mean?

It's the maximum GDPR fine the client's business is protected from. Under the regulation, fines for violations reach up to 4% of a company's annual turnover or €20 million, whichever is higher. A privacy policy, cookie consent, the right to data deletion and SSL encryption are included in every project.

### Why is the 4.5:1 ratio in the standards figures?

It's the minimum text contrast under WCAG 2.2 AA: with it the site is accessible to everyone, including people with disabilities. Along with keyboard navigation, image alt texts and ARIA markup, contrast is part of what the studio does for accessibility in every project. Level AA requires it.

### What does "100%" mean in the standards figures?

The figure means code review and automated tests are done before every deploy, without exceptions. This is how the studio applies ISO 9001: every code change is checked, and tests run before release to the server. Together with a clear technical brief before the start and satisfaction tracking by NPS, this gives the client the agreed result on time and without rework.

### How do the four standards differ in scope?

Each one covers its own part of the project. GDPR concerns visitors' personal data, ISO 27001 protects code, data and access, WCAG 2.2 AA makes the site accessible to people with disabilities, and ISO 9001 sets the order of development and delivery. Together they cover law, security, accessibility and quality.

### Which standards are international and which apply in the EU?

GDPR is a European Union regulation: it has applied since May 2018 and covers all sites with an EU audience. ISO 27001 and ISO 9001 are international standards, the first for information security management and the second for quality management. WCAG 2.2 AA are the W3C's website accessibility guidelines.

### At what stage of the project are standards built in?

From the very start of work. The requirements of all four go into the project before it begins: under ISO 9001 a clear technical brief is agreed first, under ISO 27001 code and data are protected from the first line to deployment. The privacy policy, cookie consent and WCAG accessibility are ready at site launch and are not added later.

### What does the site owner get from all four standards together?

The site is protected from GDPR fines of up to €20 million, accessible to all visitors and delivered on time. Code, data and intellectual property are protected under ISO 27001 at every stage, WCAG accessibility widens the audience and helps Google rankings, and under ISO 9001 the client gets exactly what was agreed.

### Where can I read in detail about each standard?

Each standard has its own page: GDPR, ISO 27001, WCAG 2.2 AA and ISO 9001. It describes what the standard is, why it matters, how the studio applies it and what it gives the business. The pages link to official sources: gdpr.eu, the ISO site and W3C documentation.

### How are standards related to a site's Google rankings?

Two of them speak to this directly. Under WCAG, an accessible site works for people with disabilities, which widens the audience and improves Google rankings. Under GDPR, the standard's page notes that Google takes the presence of a privacy policy into account when ranking. That is why both requirements are part of every studio project from the start.

### What practices stand behind each standard in the table?

In the table, each standard has four practices. GDPR: privacy policy, cookie consent, right to data deletion, SSL encryption. ISO 27001: AES-256 and TLS encryption, least privilege and 2FA, code audit, incident protocols. WCAG: 4.5:1 contrast, keyboard navigation, alt texts, ARIA. ISO 9001: requirements spec before kickoff, code review, automated tests, NPS.

### Why do standards matter for business in Spain?

GDPR is mandatory for all sites with an EU audience, and Spanish law (LOPDGDD) requires it too. WCAG compliance in Spain and the EU lowers legal risk and opens access to public tenders. ISO 27001 compliance is needed to work with large companies and banks.

### How do standards change the course of work on a project?

The workflow is set in advance. A clear technical brief is agreed before the start; during development, minimal access rights with 2FA, encryption and code review on every PR apply, and automated tests run before deploy. By launch the site has a privacy policy and cookie consent, and quality is then monitored through NPS.

### How does ISO 27001 differ from GDPR if both are about data?

GDPR is the EU regulation on visitors' personal data: privacy policy, cookie consent, the right to erasure. ISO 27001 is the standard for managing information security across all work: how to protect code, data and access at every stage, from AES-256 and TLS encryption to incident protocols.

## Other languages

- RU: https://seo7.es/ru/standards
- ES: https://seo7.es/es/standards

## schema.org markup

```json
{
  "@context": "https://schema.org",
  "@type": "WebPage",
  "name": "Standards",
  "description": "4 international standards in every project: GDPR, ISO 27001, WCAG 2.2 AA, ISO 9001. Protection from fines, accessibility and on-time delivery.",
  "url": "https://seo7.es/en/standards",
  "mainEntityOfPage": "https://seo7.es/en/standards",
  "inLanguage": "en-GB",
  "isPartOf": {
    "@type": "WebSite",
    "name": "SEO7.ES",
    "url": "https://seo7.es/"
  },
  "publisher": {
    "@type": "Organization",
    "name": "SEO7.ES",
    "url": "https://seo7.es/"
  }
}
```