How do people implement the JSM knowledge base widget on a site and maintain ISO27001 and SOC2

[Adam]

Wanting to implement the JSM widget on our site so clients can access the KB directly, but this causes a security alarm as the iframe.js script is being parsed/inserted via the `document.write` call. This ideally should be using something like `appendChild` to do this safely. With the current configuration, the widget does not meet ISO27001 and SOC2 compliance.

Has any other company successfully implemented the JSM widget and maintained ISO27001 and SOC2 compliance?

[marc -Collabello--Phase Locked-]

Most likely other companies using the widget just declare it out of scope for SOC2 or ISO.  By this they take a shortcut instead of addressing the real problem.