Skip to main content
NORC at the University Chicago

Certifications

As part of our commitment to research excellence, we ensure that our client deliverables and processes at NORC meet the highest standards for quality, accessibility, and security.

NORC has received a number of best-in-class certifications in information technology that strengthen our commitment to quality, system security, and data privacy.

Information Technology

CMMI Level 2: NORC’s Information Technology Project Management Office (IT PMO) has been appraised at level 2 of ISACA’s Capability Maturity Model Integration (CMMI). Level 2 establishes a high level of process efficiency, product quality, and risk mitigation, among other quality measures.

CMMI DEV | ML2 APPRAISED - Appraisal #68109 | Exp. Dec. 14, 2026

ISO 9001: NORC’s IT PMO is certified by the International Organization for Standardization (ISO) under ISO 9001:2015 to design, implement, and support IT applications for commercial and federal government contracting entities. This ensures a project management framework that is maintained and followed for all implementations in perpetuity.

alt

ISO 27001: NORC is certified ISO 27001:2022, the leading international standard providing a rigorous framework to protect our data by establishing, implementing, maintaining and continually improving information security management systems (ISMS), including the mitigation of risks and management of vulnerabilities.

A-LIGN ISO 27001 Certified

Compliance Standards

HIPAA: NORC is fully HIPAA compliant. We have a number of safeguards in place to protect the privacy and security of health information. 

SOC2: NORC’s data is hosted and managed by a third-party data center that is SOC2 compliant, with standardized controls in place to manage risks, comply with regulatory requirements, protect sensitive data, deploy incident response readiness programs, and consistently apply operational efficiencies.

WCAG: NORC is committed to making our digital environments, assets, and products accessible to a wide audience and delivering the most inclusive user experience possible. NORC follows WCAG 2.1 Level AA conformance, and additionally meets a number of Level AAA Success Criteria. More on our commitment to accessibility.

Contact Us

Interested in conducting research with NORC? 

Work with Us