Policy status: Approved and actively followed. We apply content-abuse screening, message-data controls and authorised operational oversight. Effective April 11, 2026.
Purpose and scope
We prevent misuse and protect message content and delivery metadata across the enterprise messaging processing chain.
This policy applies to personnel, contractors, technology and third parties acting for Pingplus Media to the extent of their approved access and applicable agreements. Customer and supplier responsibilities are aligned with our executed contracts and applicable law.
Controls and practices in operation
- We maintain customer and supplier segregation and authorisation across API credentials, SMPP binds, queues, dashboards, logs, archives and billing events, with access-path validation incorporated into release testing.
- We keep the existing eight content-filter scopes (Global, Tenant, Customer, Connection, Campaign, Country, Supplier, Route), with documented rule ownership, override authority and change traceability.
- We monitor traffic anomalies, geographic spikes, repeated failures, suspicious content and OTP abuse through configured alerts and operational review, with detections and follow-up actions recorded through our established oversight process.
- We mask or minimise OTP, PII and restricted message data in user interfaces, monitoring and support tickets where supported; only authorised investigation staff may retrieve full content under logged approval.
- Changes to content-filter rules, scope precedence, allowlist overrides, supplier routes and pre-dispatch decisions require explicit change approval and end-to-end regression testing; TPRM work does not authorise such changes.
- We investigate suspected messaging abuse using necessary account, route and timestamp evidence. Our investigations minimise exposure of full message content and restrict sensitive incident records to authorised reviewers.
Review and responsibility
Continuous technical controls where configured; daily abuse exceptions; quarterly rule ownership review.
Accountability and reporting
Our personnel, contractors and in-scope service partners follow this policy, with established channels for prompt reporting of suspected security issues. Exceptions are recorded, reviewed and approved by an authorised policy owner. Applicable customer contracts and legal duties continue to govern the services provided.