PR.co is now ISO 27001 certified

PR.co is now officially ISO/IEC 27001:2022 certified.

This internationally recognised certification reflects our continued investment in keeping your data secure and maintaining a robust information security management system.

Independently verified security

For years, we’ve answered customer security questionnaires, shared our processes, and worked directly with IT and procurement teams to demonstrate how we protect customer information.

As more enterprise and regulated organizations started using PR.co, those security reviews became more detailed and ISO 27001 certification increasingly became a requirement.

The certification independently verifies that we have a structured approach to identifying, managing, and reducing information-security risks across the business.

What does this mean for our customers?

PR.co continues to work as usual. Nothing changes in how you use the platform day to day.

The difference is the independent assurance behind our security practices. Our information security management system has been audited against the ISO/IEC 27001:2022 standard, giving customers additional confidence in how we protect their information.

It also makes it easier for organisations with security, IT or compliance teams to assess PR.co as part of their vendor reviews.

Our security programme

As part of this update, we’ve also published a new Security & Compliance page with more information about the measures we have in place, including:

• Annual independent penetration testing

• Enterprise-grade security controls, including SSO, 2FA and IP allowlisting

• Secure AWS-hosted infrastructure

• GDPR-focused privacy and compliance practices

• Security documentation available to enterprise customers

• Our ISO/IEC 27001:2022 certificate

Security is an ongoing commitment

ISO 27001 isn’t a one-time checklist. Our certification is valid for three years, with annual surveillance audits to make sure we continue to meet the standard.

We’ll keep reviewing risks, testing our controls, assessing suppliers, and improving how we protect customer information.

For us, the certification is less about adding another badge to the website and more about making our existing approach to security independently verifiable.

Learn more about our security programme and view our ISO certificate.