How ISO 27001:2022 protects your data

What does ISO/IEC 27001:2022 certification mean for C Teleport customers?

It confirms that C Teleport manages information security in a structured, audited way. Risks are identified and controlled, responsibilities are clearly assigned, and security practices are continuously reviewed to protect customer data.

It ensures that data is protected through defined controls that reduce the risk of unauthorised access, data loss, or misuse. Security is embedded into how the platform is built, operated, and supported.

Which types of data are protected under C Teleport’s Information Security Management System?

All information processed within the scope of the C Teleport platform is covered, including operational, passenger, and business data required to deliver and support travel management services.

What security controls are in place to prevent data loss, misuse, or unauthorised access?

C Teleport applies technical, organisational, and procedural controls to safeguard data confidentiality, integrity, and availability. These controls are documented, monitored, and regularly tested.

Does this certification cover the entire C Teleport platform, including partner-branded (white label) versions?

Yes. The audit covers the design, development, operation, and support of the C Teleport platform, including partner-branded (white label) implementations operating within the same security framework.

How often are C Teleport’s security processes reviewed and updated?

Security processes are continuously monitored and formally reviewed annually, and in the event of significant changes in C Teleport's business operations. This ensures controls remain effective as the platform, business, and risk environment evolve.

Who conducted the independent security audit, and how was it assessed?

The audit was conducted by Insight Assurance, an independent certification body. They assessed C Teleport’s Information Security Management System against the ISO/IEC 27001:2022 standard.

What happens if a security incident is identified, and how does C Teleport respond?

C Teleport has defined processes to detect, assess, and respond to security incidents in a timely and controlled manner. If an incident occurs, it is investigated by the appropriate teams, contained to minimise impact, and resolved in accordance with established procedures. Where required, affected customers are informed transparently and in line with contractual and regulatory obligations. These processes are regularly reviewed and tested to ensure they are ready.

Updated on: 23/01/2026