Security Milestone

EasySignage Achieves ISO/IEC 27001 Certification and SOC 2 Attestation

EasySignage Achieves ISO/IEC 27001 Certification and SOC 2 Attestation

 

EasySignage has reached two important security milestones. Our information security management system is now certified to ISO/IEC 27001:2022, and we are SOC 2® attested for our controls relevant to security, availability and confidentiality. Both assessments were performed by independent audit firm Sensiba.

For customers, this means you no longer have to rely on our word alone when it comes to digital signage security. Independent auditors have thoroughly reviewed how we protect your content, your accounts and your screen network.

EasySignage ISO/IEC 27001 certified and SOC 2 attested badges by Sensiba

Visit our Security page to learn more about how we protect your data and to request our security documents.

 

 

What EasySignage Achieved

Here is a summary of the key facts:

ISO/IEC 27001SOC 2
What it isCertification of our information security management system (ISMS)Independent attestation of our controls
Standard or frameworkISO/IEC 27001:2022AICPA Trust Services Criteria: Security, Availability and Confidentiality
Performed bySensiba Australia Pty Ltd, an accredited certification bodySensiba LLP
Key dateCertified 30 October 2026, valid until 30 October 2029Report as of 20 October 2026
ScopeThe ISMS supporting the delivery of the EasySignage cloud-based digital signage platform, including its development, operation and supportThe EasySignage Software as a Service system

 

What Is ISO/IEC 27001?

ISO/IEC 27001 is the international standard for managing information security. It outlines how an organisation should identify security risks, implement the right controls, and keep improving those controls over time.

The standard applies to the entire system, not just one tool or setting, covering all aspects, including our people, processes, policies and technology.

Certification is not a one-off event. ISO/IEC 27001 runs on a three-year cycle, with surveillance audits along the way to confirm we consistently meet the standard.

 

What Is SOC 2?

System and Organisation Controls (SOC) 2 is a framework established by the American Institute of Certified Public Accountants (AICPA). A SOC 2 attestation evaluates the controls that a service provider uses to protect customer data and ensure the reliability of its systems.

Our SOC 2 attestation assesses whether our controls are suitably designed, as of 20 October 2026.

Our SOC 2 attestation covers three Trust Services Criteria:

  1. Security: protecting systems and data from unauthorised access.
  2. Availability: keeping the platform available for user access.
  3. Confidentiality: safeguarding information that is designated as confidential.

 

"Our customers trust us with their brand, their content and their screens in thousands of public spaces. ISO/IEC 27001 certification and our SOC 2 attestation mean that trust is now backed by independent assurance, not just our word. This was a team-wide commitment to how we work every day, and it is a foundation we will keep building on as we grow."

— Ahmad Issa, Founder and Managing Director, EasySignage

 

What This Means for Your Digital Signage Security

Digital signage places your brand in front of customers, staff and visitors every day. A single update can disseminate information to every screen in your network. That is why security has to be built into the platform from the beginning rather than added later.

Here is what these milestones mean for you:

Faster Security Reviews

Many IT and procurement teams ask for ISO/IEC 27001 or SOC 2 before approving new software. You can now request our ISO/IEC 27001 certificate and SOC 2 attestation report for your vendor assessment, instead of starting from a long questionnaire.

Independent Assurance, Not Just Promises

Every software provider claims to prioritise security, but ISO/IEC 27001 and SOC 2 indicate that an independent auditor has reviewed our security risk management, access control, system monitoring, incident response, and recovery planning.

Enterprise-Ready Digital Signage

Larger organisations often require a recognised security framework before they deploy software across multiple locations. These certifications help retailers, hospitality groups, schools, healthcare providers and corporate offices to confidently implement EasySignage, from one screen to thousands.

Assurance for Reseller Partners

EasySignage reseller partners can operate the platform under their own brand for their customers. Partners can now refer to our independent certifications when their clients inquire about the security measures in place for the platform behind their service.

Built on Trusted Cloud Infrastructure

EasySignage is hosted on Google Cloud. Our ISO/IEC 27001 and SOC 2 work reflect our commitment to how we build, operate, and support the platform on this reliable infrastructure.

 

Security Is a Shared Responsibility

Effective security measures are most successful when combined with good practices on your part.

To help keep your account secure, follow these guidelines:

  • Enable multi-factor authentication (MFA) or single sign-on (SSO) for your team.
  • Give each user only the access they need for their role.
  • Remove access straight away when someone leaves your organisation.
  • Contact EasySignage immediately if you suspect an account has been compromised.

 

How to Request Our Security Documents

You can request our ISO/IEC 27001 certificate and SOC 2 attestation report through the EasySignage Trust Center. The SOC 2 report is available to customers, prospective customers and partners under a non-disclosure agreement (NDA).

 

Frequently Asked Questions

 

Is EasySignage ISO 27001 certified?

Yes. EasySignage is certified to ISO/IEC 27001:2022 by Sensiba Australia Pty Ltd. The certificate was issued on 30 October 2026 and is valid until 30 October 2029, subject to ongoing surveillance audits.

Is EasySignage SOC 2 certified?

SOC 2 is not a certification. It is an independent attestation. EasySignage is SOC 2 attested by Sensiba LLP, as of 20 October 2026, covering the Security, Availability and Confidentiality Trust Services Criteria.

ISO 27001 vs SOC 2: what is the difference?

ISO/IEC 27001 is an international standard that certifies how an organisation manages information security as a whole system. SOC 2 is an AICPA framework that results in a detailed report on specific controls relevant to security, availability, processing integrity, confidentiality or privacy. Many enterprise buyers ask for one or both.

How can I get a copy of the EasySignage SOC 2 attestation report?

Customers, prospective customers and partners can request the SOC 2 attestation report through the EasySignage Security page. The report is shared under a non-disclosure agreement because it contains detailed information about our systems.

Do existing EasySignage customers need to do anything?

No. Nothing changes in how you use EasySignage. We do recommend turning on MFA or SSO for your team and reviewing user access regularly.

 

See How EasySignage Protects Your Screens

Security is an ongoing commitment. EasySignage will maintain its ISO/IEC 27001 certification through regular surveillance audits and recertification.

New to EasySignage? Start free on one screen with no time limit and no credit card required.