Company - Security and trust

Your security team can check MagicOrange’s certifications before the first call.

A number an executive will defend in public has to be auditable. The same goes for the company that produces it. The ISO 27001 certificate, the CSA STAR registry entry and our ESG report are all public, and you can download them without a form. If your questionnaire asks for more, send it to us and we will answer it.

Certifications

What MagicOrange is certified for, and where to check it

Each one below points to the certificate, the registry entry or the report where one is public. Check them yourself rather than taking our word.

ISO 27001:2022

Certified

Our information security management system has been independently audited against the current version of the standard.

Download the certificate

SOC 2 Type II

Attested

An independent auditor has tested whether our security, availability and confidentiality controls are designed correctly and have operated effectively over an extended period.

CSA STAR Level 1

Listed on the public registry

Listed on the public Cloud Security Alliance registry, as a self-assessment against its Cloud Controls Matrix.

View our registry entry

CyberVadis Gold

Rated 911 out of 1000

Rated in the Mature tier by an independent cyber risk rating service.

UK Cyber Essentials

Certified

Certified under the UK government-backed Cyber Essentials scheme, which protects against common cyber threats.

GDPR

Compliant

We follow European data privacy standards and are GDPR compliant.

Read our privacy policy

Data and platform

Numbers you can audit, on a platform you can inspect

Where the numbers come from

Trust starts with the data. The figures behind a technology decision come from hundreds of source systems that rarely agree with one another. MagicOrange reconciles, enriches and relates them before anything is built on top, and every figure stays traceable back to the record it came from, in both directions.

Governance

How MagicOrange holds itself to account

Anyone can raise a concern about MagicOrange through an independent whistleblowing channel. It is open to our employees, our partners and external stakeholders, it accepts anonymous reports, and it is handled outside the company. We also publish an ESG report, so the commitments we make about conduct can be checked against what we say we do.

Questionnaires

Filling in a security questionnaire?

Most of what a questionnaire asks is answered on this page: the ISO 27001 certificate, the CSA STAR entry and the ESG report. If yours asks for more, send it across and we will come back with answers rather than a link to a policy.