TL;DR
- PingAura is certified to ISO/IEC 27001:2022
- Certificate IC-IS-2608130, issued 11 August 2026
- Accredited by the Standards Council of Canada, an IAF signatory
- Verify it independently on IAF CertSearch
- Scope covers the platform and the engineering, product, sales and operations functions behind it
- Full details on our security page
PingAura AI Technologies Private Limited is certified to ISO/IEC 27001:2022, the international standard for information security management. What follows is what that covers, why we did it, and what it means if you are evaluating us.
What the scope covers
Scope is where a certificate earns its value, so here is ours in full.
It covers the design, development, maintenance and operation of the PingAura platform, along with the engineering, product, sales and operations functions behind it.
The platform runs entirely on public cloud infrastructure, so physical infrastructure controls are inherited from those providers. That is the accurate shape of a cloud company's certification, and the certificate states it plainly.
Why we did it
Two reasons, in the order they actually mattered.
The first is that enterprise buyers ask, and they are right to. Security review is where procurement slows down, and a certificate number moves that conversation forward in a way that assurances cannot.
The second turned out to be more valuable. Certification makes you write down what you already do, and writing it down is where you find the work worth doing. An access review that lived in one person's memory now has an owner. A recovery plan that had never been timed has been tested against a clock. Registers that were informal became maintained.
That work is the real outcome. The certificate is evidence of it.
How we got there
We ran the programme on a continuous compliance platform that monitors controls and assembles evidence in the shape an auditor expects. Evidence stayed current rather than being gathered retrospectively, which made the audit itself straightforward.
The audit was performed by an independent, accredited certification body.
The engineering underneath is what the certification reflects: sensitive fields encrypted at the application layer before they reach the database, tenant isolation enforced in the database rather than in application code, managed secrets, and recovery procedures that have been exercised.
What the certification means
ISO 27001 certifies that we operate an information security management system meeting the standard's requirements, independently audited and accredited. It covers how we identify risk, apply controls, and keep improving them.
It sits alongside the rest of our security programme rather than replacing it. We run an annual vulnerability assessment and penetration test with a CERT-In empanelled auditor, with findings remediated and retested.
What is next
Certification is a cycle, not a milestone. Surveillance audits keep the system honest between assessments, and we will keep publishing what we hold as it changes.
If you are evaluating PingAura and your security team needs the certificate, our data processing agreement, or the security whitepaper, email security@pingaura.ai and we will send them.
The certificate in detail
For anyone who needs the specifics, here they are in full. These are what make the claim checkable rather than something you have to take on trust.
| Field | Value |
|---|---|
| Standard | ISO/IEC 27001:2022 |
| Certificate number | IC-IS-2608130 |
| Issued | 11 August 2026 |
| Accreditation | Standards Council of Canada (IAF signatory) |
You can confirm all of it yourself on IAF CertSearch, the International Accreditation Forum's public register, without asking us for anything.
Accreditation is the detail worth noticing. It means the body that audited us is itself independently assessed, and the certificate is recognised internationally rather than resting on one auditor's word.
FAQs
Is PingAura ISO 27001 certified?
Yes. PingAura AI Technologies Private Limited holds ISO/IEC 27001:2022 under certificate IC-IS-2608130, issued on 11 August 2026.
How can I verify the certificate independently?
Look it up on IAF CertSearch, the International Accreditation Forum's database of accredited certifications. You do not need to contact us to confirm it.
Who accredited the certification?
The Standards Council of Canada, a signatory to the IAF Multilateral Recognition Arrangement, which is what gives the certificate international recognition.
What does the certification cover?
The design, development, maintenance and operation of the PingAura platform, and the engineering, product, sales and operations functions supporting it. The platform runs on public cloud infrastructure, so physical infrastructure controls are inherited from those providers.
What does ISO 27001 certify?
That an organisation operates an information security management system meeting the standard's requirements, verified by an independent audit. It covers how risk is identified, how controls are applied, and how both are reviewed over time.
Where is customer data stored?
The database of record is hosted in Mumbai, India. Sub-processors and their locations are listed on our sub-processors page.
How do I report a security vulnerability?
Email security@pingaura.ai with enough detail to reproduce the issue. We acknowledge receipt and keep you updated until it is resolved.
