Security · ISO 27001
Security managed to ISO/IEC 27001
Our information security management system is built around the ISO/IEC 27001:2022 framework and its Annex A controls.
What it covers
Risk management
We identify, assess and treat information security risks across the platform, our people and our suppliers, and review them regularly.
Policies and ownership
Documented security policies with named owners, reviewed at least annually and whenever the platform changes.
Annex A controls
Organisational, people, physical and technological controls — from access management and encryption to secure development and supplier security.
Continual improvement
Internal audits, management reviews and corrective actions keep the system improving, not just documented.
What it means for you
Faster security reviews
Our controls map to the questions your procurement and security teams already ask.
Confidence in our suppliers
Carriers and subprocessors are assessed before onboarding and monitored over time.
Documentation on request
We’ll share our statement of applicability and supporting documentation as your review requires.
Ready to take your messaging further
Tell us what you want your customers to be able to do. We’ll scope it with you and help you launch.