VFS Global statement on Sri Lanka E-Visa

May, 6, 2024

VFS Global is a trusted partner to 67 client governments. It operates over 3,300 visa application centres in 151 countries and has processed over 285 million applications since its inception in 2001.

Headquartered in Zurich and Dubai and backed by majority shareholder Blackstone, along with the Swissbased Kuoni and Hugentobler Foundation and EQT, VFS Global is committed to creating value for all stakeholders and leading in responsible, innovative solutions making government services more effective and efficient.

As the world’s leading outsourcing and technology service specialist, VFS Global embraces technological innovation including Generative AI to support governments and diplomatic missions worldwide. The company manages non-judgmental and administrative tasks related to applications for visa, passport, and consular services for its client governments, increasing productivity and enabling them to focus entirely on the critical task of assessment.

A technology-driven company, VFS Global continuously transforms its business model with secure and efficient processes, market offerings and advanced technologies including AI/Analytics. With a responsible approach to technology development, adoption and integration, the company prioritizes ethical practices and sustainability while serving client governments. VFS Global enhances cross-border mobility for global citizens through highly secure, reliable, efficient, and innovative technology solutions.

Data security is fully embedded in the design and functioning of its processes. The company fully adheres to the highest international standards, such as ISO 27001:2013, UK Cyber Essentials Plus, Spain National Cybersecurity Framework, Germany IT Grundschutz, etc. VFS Global has robust systems and controls in place and complies with various data localisation, privacy, and data protection laws, including GDPR.

VFS Global is also certified under ISO/IEC 27701:2019, an extension to ISO 27001 by TUV SUD, showing its adherence to the requirements and guidelines for a Privacy Information Management System (PIMS), and its responsibilities as a PII processor, in compliance with European GDPR.