ISO 27001:2022Certified

ice.email's Information Security Management System (ISMS) has been independently audited and certified by Bureau Veritas to the ISO 27001:2022 standard.

Bureau Veritas

Certification Body

Bureau Veritas is a world-leading certification body with over 190 years of experience in testing, inspection, and certification services. Their independent audit confirms ice.email meets the rigorous ISO 27001:2022 requirements.

Certificate Details

StandardISO/IEC 27001:2022
ScopeEmail services and marketing platform
Certification BodyBureau Veritas Certification
Initial CertificationFebruary 2026
Valid UntilFebruary 2029

Security Controls Summary

Our ISMS implements comprehensive controls across all domains of information security.

Access Control

Role-based access control (RBAC), multi-factor authentication, least privilege principles, and regular access reviews.

Encryption

TLS 1.3 for data in transit, AES-256 encryption for data at rest, secure key management, and encrypted backups.

Incident Management

24/7 monitoring, automated alerting, incident response procedures, breach notification within 72 hours, and post-incident reviews.

Business Continuity

Automated backups, disaster recovery plan, redundant infrastructure, 99.9% uptime SLA, and regular DR testing.

Audit Logging

Comprehensive audit trails for all administrative actions, data access logging, tamper-proof log storage, and regular log reviews.

Personnel Security

Background checks, security awareness training, confidentiality agreements, and role-based security clearances.

What ISO 27001 Means for You

Your data is protected by internationally recognized security standards

Independent third-party verification of our security practices

Continuous improvement of our security posture through regular audits

Documented incident response and business continuity procedures

Regulatory compliance support (GDPR, ePrivacy, and more)

Transparent security governance and risk management

Learn More About Our Security

Review our detailed security policy or contact us for more information about our security practices.