Oncord Blog. Posted August 20th, 2026
Oncord is Now ISO 27001 Certified
The way Oncord protects your information is now independently certified against an internationally recognised security standard.
What is ISO 27001?
ISO 27001 is an international standard for managing information security. It gives a business a structured way to protect the information people trust it with.
Certification means an independent auditor has checked that the business meets the standard’s requirements.
Main Features of ISO 27001
Spot risks. Decide what needs attention.
Identify what could put information at risk, then decide how to reduce that risk. Review those decisions as things change.
Clear responsibilities across the business.
Set out who is responsible for information security and how people should handle information in their daily work.
The right access for the right people.
Limit access to what people need for their work, and review permissions when roles or responsibilities change.
Choose safeguards to match the risks.
Use appropriate safeguards, including encryption, to help protect information from unauthorised access.
Be ready to restore what matters.
Keep backups and test recovery plans, so there is a clear way to restore information if something goes wrong.
Know what to do when something happens.
Monitor for potential security issues and establish how to investigate, respond and learn from incidents.
Oncord is now
ISO 27001 certified
We’re proud to share that Oncord is certified to ISO/IEC 27001:2022.
An independent auditor has assessed how we manage information security across our company and platform. That gives you independent evidence of how we look after your information.
What Does It Mean to You?
You rely on Oncord to run your website and handle customer information. Our certification covers the people, processes and technology behind that work, giving you more confidence in how it’s managed.
Access with a purpose Our team’s access follows the principle of least privilege: only what is needed for the job.
Encryption Data is encrypted in transit. Backups are encrypted in transit and at rest.
Reviewed changes Platform changes go through code review before release.
Recovery preparation Daily backups and recovery testing help us prepare for disruption.
Support a review Use the certificate as evidence when completing supplier reviews or tender responses.
Keep the scope clear The certification applies to Oncord. It does not certify your own business or replace every security question.
Security That Keeps
Being Reviewed
Our security practices are reviewed as technology and risks change.
Independent audits take place each year to check that we continue to meet the standard.
Leave a Comment