ChannelEngine Security
ChannelEngine Security
CEO statement
CEO statement
“As a company, information processing is fundamental to our success and to fulfill our global expansion strategy. The protection and security of that information is a board-level priority.
In order to achieve a high-quality, effective and sustainable Information Security Management System within ChannelEngine, a dedicated Information Security function has been established to carry out the development, implementation, and maintenance of ChannelEngine’s Information Security activities.
ChannelEngine Management is committed to ensuring the confidentiality, integrity and availability of its client, employee, investor and corporate data that it processed, transferred and stored both physically and electronically. We take our obligations under the GDPR and Data Protection laws and regulations seriously. ChannelEngine Management is committed to providing the needed resources to develop, implement and continually improve our information security practices that are appropriate to ChannelEngine, our customers, and our investors’ best interest.
ChannelEngine Management accepts the following principles to ensure sound implementation of core Information Security requirements throughout the whole organization;
- Embrace compliance to regulatory framework as a standard and reinforce corporate information security posture by adopting internationally respected professional norms and standards.
- Stand for corporate Information Security Standards when establishing and maintaining business relationships and partnerships with external parties.
- Ensure safety and job security of all employees who internally discloses information security violations and wrong doings.
We strongly emphasize that Information Security is everyone’s responsibility at ChannelEngine, and all employees are bound by Information Security Policies and Procedures.”
Jorrit Steinz - CEO
ISO27001
ISO27001
ISO 27001 is the leading international standard focused on information security. It was published by the International Organization for Standardization (ISO), in partnership with the International Electrotechnical Commission (IEC). Both are leading international organizations that develop international standards.
ISO 27001 is part of a set of standards developed to handle information security: the ISO/IEC 27000 series. Its full name is “ISO/IEC 27001 – Information security, cybersecurity and privacy protection — Information security management systems.”
ISO framework and the purpose of ISO 27001.
The ISO framework is a combination of various standards for organizations to use. ISO 27001 provides a framework to help organizations, of any size or any industry, to protect their information in a systematic and cost-effective way, through the adoption of an Information Security Management System (ISMS).
ChannelEngine has been ISO27001:2013 certified since 2021.
Technical and Organizational Measures (TOMs)
Technical and Organizational Measures (TOMs)
Confidentiality of information
Confidentiality of information
ChannelEngine facilitates efficient multichannel selling, streamlining of operations and helps our partners maximize their online sales. It is essential for our business partners to securely use the ChannelEngine application while it is integrated with various ecommerce platforms using the Merchant API.
To achieve the security goals of confidentiality of information, availability of the platform and integrity of communicated data between the communicating platform, the following measures should be taken;
Responsible Disclosure Statement
Responsible Disclosure Statement
If you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible. ChannelEngine would like to ask you to help us better protect our clients and our product”.