What does it mean?
Information Security is a priority within Piano Software as a modern, forward-thinking business. Piano recognizes the need to ensure that its business operates smoothly and without interruption for the benefit of its customers, shareholders and other stakeholders.
In order to provide such a level of continuous operation, Piano has implemented an Information Security Management System (ISMS) in line with the International Standard for Information Security, ISO/IEC 27001:2022.
The operation of this ISMS has many benefits for the business, including:
-
Protection of revenue streams and company profitability.
-
Ensuring the proper delivery of services to customers including, confidentiality, integrity, and availability.
-
Maintenance and enhancement of company values.
-
Compliance with all legal and regulatory requirements.
An ISMS Manual is available in both paper and electronic form and will be communicated within the organization, and to all relevant stakeholders and interested third parties.
Commitment to the delivery of information security extends through all levels of the organization, and will be demonstrated through the information security policy, and the provision of appropriate resources to establish and develop the Information Security Management System.
Which Piano product is covered?
How do we comply?
Piano ensures compliance with ISO/IEC 27001:2022 by performing periodical internal and external compliance audits and reviews. The compliance of specific controls is evaluated on a frequent basis and coordinated throughout the whole organization.
Certification
Piano is ISO/IEC 27001:2022 certified. The certification demonstrates Piano’s ongoing commitment to quality assurance through the execution of superior operational processes and ensures that the highest level of information security policies, procedures, and risk management are in place.
The certification was issued on 16th April 2020 and was renewed on 29th November 2026 with the certification registration no. 10017614 ISMS22. The certificate is valid till 15th April 2029. The Scope of the certification is: "The Information Security Management System (ISMS) maintaining the Confidentiality, Integrity, Availability and Privacy of the operation, management and control of Piano Software’s Cloud Based Services, including management direction, oversight and control over internal and outsourced development services
The certification is available upon request at security@piano.io.