ISO 27001 certification.
Overview
BroadNet's Information Security Management System (ISMS) is certified to ISO/IEC 27001:2022. Surveillance audits annually; full re-certification every three years. The certificate covers BroadNet's messaging platform and supporting operations, including MobileValidate (a BroadNet brand); certified scope statement, certificate number, and validity dates are shared with evaluators under NDA.
Scope
Design, development, operation, and support of messaging infrastructure including SMS, WhatsApp, RCS, Voice, OTP, HLR Lookup, MobileValidate phone and e-mail checks, and operator-side firewall, SMSC, and signaling products.
Certificate
Certificate copies and audit reports are available under NDA on request. The certificate number and certification body are printed on the certificate itself and are not published on this site.
Definitions
Audit and compliance terminology referenced on this page is defined below. Where definitions diverge from a specific framework, the framework standard prevails for that attestation.
- Scope statement
- The systems, processes, and locations covered by the attestation. Out-of-scope items are explicitly excluded.
- Surveillance audit
- Annual reassessment between full certification cycles to confirm controls remain effective.
- Type I vs Type II
- Type I attests to control design at a point in time. Type II attests to operating effectiveness over a period.
- Bridge letter
- Auditor confirmation that no material changes have occurred between the end of the audit period and the letter date.
Questions?
Questions on this attestation, scope, or certificate verification? Our legal and security teams co-own compliance correspondence.
legal@broadnet.me