
EasySignage has reached two important security milestones. Our information security management system is now certified to ISO/IEC 27001:2022, and we are SOC 2® attested for our controls relevant to security, availability and confidentiality. Both assessments were performed by independent audit firm Sensiba.
For customers, this means you no longer have to rely on our word alone when it comes to digital signage security. Independent auditors have thoroughly reviewed how we protect your content, your accounts and your screen network.

Visit our Security page to learn more about how we protect your data and to request our security documents.
Here is a summary of the key facts:
| ISO/IEC 27001 | SOC 2 | |
|---|---|---|
| What it is | Certification of our information security management system (ISMS) | Independent attestation of our controls |
| Standard or framework | ISO/IEC 27001:2022 | AICPA Trust Services Criteria: Security, Availability and Confidentiality |
| Performed by | Sensiba Australia Pty Ltd, an accredited certification body | Sensiba LLP |
| Key date | Certified 30 October 2026, valid until 30 October 2029 | Report as of 20 October 2026 |
| Scope | The ISMS supporting the delivery of the EasySignage cloud-based digital signage platform, including its development, operation and support | The EasySignage Software as a Service system |
ISO/IEC 27001 is the international standard for managing information security. It outlines how an organisation should identify security risks, implement the right controls, and keep improving those controls over time.
The standard applies to the entire system, not just one tool or setting, covering all aspects, including our people, processes, policies and technology.
Certification is not a one-off event. ISO/IEC 27001 runs on a three-year cycle, with surveillance audits along the way to confirm we consistently meet the standard.
System and Organisation Controls (SOC) 2 is a framework established by the American Institute of Certified Public Accountants (AICPA). A SOC 2 attestation evaluates the controls that a service provider uses to protect customer data and ensure the reliability of its systems.
Our SOC 2 attestation assesses whether our controls are suitably designed, as of 20 October 2026.
Our SOC 2 attestation covers three Trust Services Criteria:
"Our customers trust us with their brand, their content and their screens in thousands of public spaces. ISO/IEC 27001 certification and our SOC 2 attestation mean that trust is now backed by independent assurance, not just our word. This was a team-wide commitment to how we work every day, and it is a foundation we will keep building on as we grow."
— Ahmad Issa, Founder and Managing Director, EasySignage
Digital signage places your brand in front of customers, staff and visitors every day. A single update can disseminate information to every screen in your network. That is why security has to be built into the platform from the beginning rather than added later.
Here is what these milestones mean for you:
Many IT and procurement teams ask for ISO/IEC 27001 or SOC 2 before approving new software. You can now request our ISO/IEC 27001 certificate and SOC 2 attestation report for your vendor assessment, instead of starting from a long questionnaire.
Every software provider claims to prioritise security, but ISO/IEC 27001 and SOC 2 indicate that an independent auditor has reviewed our security risk management, access control, system monitoring, incident response, and recovery planning.
Larger organisations often require a recognised security framework before they deploy software across multiple locations. These certifications help retailers, hospitality groups, schools, healthcare providers and corporate offices to confidently implement EasySignage, from one screen to thousands.
EasySignage reseller partners can operate the platform under their own brand for their customers. Partners can now refer to our independent certifications when their clients inquire about the security measures in place for the platform behind their service.
EasySignage is hosted on Google Cloud. Our ISO/IEC 27001 and SOC 2 work reflect our commitment to how we build, operate, and support the platform on this reliable infrastructure.
Effective security measures are most successful when combined with good practices on your part.
To help keep your account secure, follow these guidelines:
You can request our ISO/IEC 27001 certificate and SOC 2 attestation report through the EasySignage Trust Center. The SOC 2 report is available to customers, prospective customers and partners under a non-disclosure agreement (NDA).
Yes. EasySignage is certified to ISO/IEC 27001:2022 by Sensiba Australia Pty Ltd. The certificate was issued on 30 October 2026 and is valid until 30 October 2029, subject to ongoing surveillance audits.
SOC 2 is not a certification. It is an independent attestation. EasySignage is SOC 2 attested by Sensiba LLP, as of 20 October 2026, covering the Security, Availability and Confidentiality Trust Services Criteria.
ISO/IEC 27001 is an international standard that certifies how an organisation manages information security as a whole system. SOC 2 is an AICPA framework that results in a detailed report on specific controls relevant to security, availability, processing integrity, confidentiality or privacy. Many enterprise buyers ask for one or both.
Customers, prospective customers and partners can request the SOC 2 attestation report through the EasySignage Security page. The report is shared under a non-disclosure agreement because it contains detailed information about our systems.
No. Nothing changes in how you use EasySignage. We do recommend turning on MFA or SSO for your team and reviewing user access regularly.
Security is an ongoing commitment. EasySignage will maintain its ISO/IEC 27001 certification through regular surveillance audits and recertification.
New to EasySignage? Start free on one screen with no time limit and no credit card required.