MagicOrange Legal & Compliance

 

MagicOrange Terms of Use

 

 

MagicOrange’s Commitment to ESG

 

Environmental, Social and Governance (ESG) Report

MagicOrange is committed to sustainable practices and responsible corporate governance. You can view our full ESG Report outlining our efforts and progress on these initiatives by downloading the document below.

 

MagicOrange’s Security Standards

At MagicOrange, security is a continuous commitment, woven into every layer of our platform. We maintain a comprehensive “Tapestry of Assurance” to provide our enterprise clients with the highest level of confidence in our security, availability, and confidentiality.

Core Certifications & Attestations For MagicOrange:

SOC 2 Type II

SOC 2 Type II (Attested): Our SOC 2 Type II report provides independent validation that our security controls are not only designed correctly but have operated effectively over an extended period. This is our commitment to consistent, reliable operational excellence.

ISO 27001:2022

ISO 27001:2022 (Certified): We maintain a certified Information Security Management System (ISMS) aligned with the latest global standards, ensuring a rigorous approach to managing information security risks. Download MagicOrange’s ISO/IEC 27001:2022 Certificate

CyberVadis Gold

CyberVadis Gold (Mature Rating): MagicOrange has achieved a Gold Medal from CyberVadis with a score of 911/1000. This “Mature” rating places us in the top tier of companies globally for cybersecurity performance.

CSA STAR Level 1

CSA STAR Level 1 (Registered): We prioritize transparency in the cloud. Our self-assessment is publicly available on the Cloud Security Alliance STAR Registry, providing detailed insights into our cloud security controls.

Cyber Essentials

Cyber Essentials (Certified): We are certified under the UK’s Cyber Essentials scheme, validating our technical defenses against common cyber threats.

GDPR

GDPR Compliant: We adhere to strict European data protection standards, ensuring privacy is maintained for all global users.

Why This Matters

This multi-layered approach ensures that MagicOrange is enterprise-ready and capable of mitigating risk at every level—from technical hygiene to global governance. We do everything commercially and technically possible to keep our clients safe, providing a secure foundation for your IT Financial Management journey.

 

Ethical Reporting & Whistleblowing

At MagicOrange, we are committed to conducting our business with the highest standards of integrity, transparency, and ethical conduct. To support this commitment, an independent and secure reporting channel is available for employees, partners, and external stakeholders to raise concerns regarding unethical practices, fraud, bribery or compliance violations.

All reports are handled in strict confidence, can be submitted anonymously, and are processed in accordance with best practice standards. To submit a concern, email: magicorange@whistleblowing.co.za.