ChannelEngine Security
CEO statement
CEO statement
“As a company, information processing is fundamental to our success and fulfillment of our global expansion strategy. The protection and security of that information is a board-level priority.
In order to achieve a high-quality, effective and sustainable Information Security Management System within ChannelEngine, a dedicated Information Security function has been established to carry out the development, implementation, and maintenance of ChannelEngine’s Information Security activities.
ChannelEngine’s management is committed to ensuring the confidentiality, integrity and availability of its client, employee, investor and corporate data that is processed, transferred and stored both physically and electronically. We take our obligation under the GDPR and data protection laws and regulations seriously. ChannelEngine Management is committed to providing the needed resources to develop, implement and continually improve the information security practices that are most appropriate to the company, our customers and in the best interests of our investors.
ChannelEngine management accepts the following principles to ensure sound implementation of core information security requirements and controls throughout the organization;
- Embrace compliance to regulatory framework as a standard and reinforce corporate information security posture by adopting internationally respected professional norms and standards.
- Stand for corporate Information Security Standards when establishing and maintaining business relationships and partnerships with external parties.
- Ensure safety and job security of all employees who internally disclose information security violations, weaknesses and wrong doings.
We strongly emphasize that Information Security is everyone’s responsibility at ChannelEngine, and all employees are bound by Information Security Policies and Guidelines."
Jorrit Steinz - Founder & CEO
ISO27001
ISO27001
ISO 27001 is the leading international standard focused on information security. It was published by the Organization for Standardization (ISO), in partnership with the International Electrotechnical Commission (IEC). Both are leading international organizations that develop international standards.
ISO27001 is part of ISO/IEC 27001 series, a set of standards developed to handle information security. The full name of the standard is “ISO/IEC 27001 - Information Security, cybersecurity and privacy protection - Information security management systems.”
ISO framework and the purpose of ISO 27001.
ISO framework is a combination of various standards for organizations to use. ISO 27001 provides a framework to help organizations, of any size or industry , to protect their information in a systematic and cost-effective way, through the adoption of an information security management system (ISMS).
Channelengine has been ISO27001:2022 certified since 2025. Read more here.
Technical and Organizational Measures (TOMs)
Technical and Organizational Measures (TOMs)
The security-related technical and organizational measures (TOMS) provided below apply to all product and technology services provided by ChannelEngine internally and externally.
Our Information Security Management System (ISMS) covers 8 key domains, aligned with enterprise best practices.
- Identity and access management (IAM) policies
- Security & Risk management policies
- Security engineering and operational policies
- Software development policies
- Security assessment, testing and audit policies
- Security awareness and education policies
- BCM & DR policies
- Contractual, legal & privacy policies
Confidentiality of information
Confidentiality of information
To achieve the security goals of confidentiality of information, availability of the platform and integrity of communicated data between the communicating platform, the following measures should be taken:
- Account Security & Authentication (SSO, MFA, passwords, roles)
- API & Integration Security (HTTPS, permissions, flows)
- Data Protection (encryption, GDPR)
- Secure Communication (ticketing, encrypted channels)
- Software Updates (patches, vendor checks)
- Monitoring & Response (incident handling, alerting)
.png?width=768&height=768&name=website%20page%20768x768%20(2).png)
Your Data. Your Customers. Our Commitment.
Your Data. Your Customers. Our Commitment.
Whether you’re a fast-scaling brand or an enterprise-level marketplace, you can trust that we’ve built privacy by design into our platform and operations.
Our Privacy Practices Cover:
GDPR Compliance
- Full alignment with the GDPR and applicable privacy laws and regulations
- Privacy by design across product development and architecture
- Lawful basis for data processing
Data Retention & Deletion
- Data retention policies based on legal and operational requirements
- Right to erasure and full support for data subject access requests (DSARs)
User Rights & Controls
- Built-in tools to manage access rights and user permissions
- Secure interfaces for data access, correction, and deletion
Data Transfers & Subprocessors
- Use of vetted subprocessors with data processing agreements (DPAs)
- Cross-border safeguards for data transfers, including SCCs where required
- Regular reviews of third-party data practices
Transparency & Accountability
- Published Privacy Policy, Subprocessors List, and DPA availability upon request
- Internal training on privacy and data ethics
📬 Have Questions or a Data Request?
Reach out to our Privacy Team via our contact form.
Responsible Disclosure Statement
Responsible Disclosure Statement
ChannelEngine would like to ask you to help us better protect our client’s data and product. If you discover a vulnerability, we would like to know about it so that we can take steps to address it as quickly as possible.
