Our security approach
Policy status: Approved and in effect. Pingplus Media maintains this policy as an active part of its established governance and daily operating practices. Our employee information-security, acceptable-use, confidentiality and access-control policies are also approved, communicated and followed. Effective April 11, 2026.
Pingplus Media maintains an information security management system designed to identify, assess and manage information security risks across its certified scope. Security control operation and applicability depend on each service and customer deployment.
ISO/IEC 27001:2022 certification
Pingplus Media has been certified to ISO/IEC 27001:2022 by QRO Certification LLP, certificate 305026090945IS, dated 9 September 2026, with stated expiry 8 September 2029 subject to required surveillance and continued certification status.
Certified scope: Providing information security management related to telecommunication and cloud communication services, including enterprise services, software development, maintenance and support, advertising and digital marketing services, human resource management software services, and data processing activities, including associated information technology systems and supporting business processes.
Certification applies to the information security management system and the stated scope. Enterprise customers can request certificate documentation and scope details through our contact page.
Controls and governance
Our enterprise software includes role-aware access control, tenant-aware data access, audit logging and message-content governance capabilities, with operational and infrastructure safeguards selected for the deployment. Technical details, test results and customer-specific responsibilities can be discussed under an appropriate confidentiality agreement. We do not publish sensitive configurations, infrastructure secrets or live security findings.
Reporting security concerns
Please follow our Responsible Security Reporting instructions. Do not perform unsolicited scanning or attack live services.
Information security management and ownership
Information security governance is coordinated by executive leadership and designated technology, operations and compliance contacts. This includes policy ownership, asset responsibility and supplier risk management.
Certification documentation and enquiries
The ISO/IEC 27001:2022 certificate identifies the certified information security management scope, certifying body and validity period. Certificate details can be provided for vendor due diligence.
Identity, platform access and monitoring
Our security approach covers accountable user identities, role-based access, restricted production access, event logging and controlled changes. Authentication and network safeguards are matched to the system and customer service.
Secure engineering and vulnerability management
Security and infrastructure changes are assessed for risk, compatibility and customer impact. Change planning includes testing and rollback consideration, especially where an integration could affect enterprise messaging services.
Shared responsibility
Customers remain responsible for the lawfulness and provenance of their recipient lists, sender registration, account administration, integration-secret handling and the security of devices that connect to Pingplus services. Third-party carriers, infrastructure hosts and channel providers operate under their own contractual and security responsibilities. No public control description removes either party’s responsibilities under applicable law or contract.
For questions about this policy or enterprise service requirements, please contact our team.