OnSign is ISO/IEC 27001 Certified: Learn What This Means

OnSign has received ISO/IEC 27001 certification for its information security management system (ISMS). The certificate was issued by QMS Certification after an independent audit.

Every day, our customers trust OnSign with content that appears on screens in stores, offices, hospitals, and public spaces. Many of them work in industries with strict security requirements. This certification gives them, and the integrators who deploy OnSign, independent proof that we protect their data according to a rigorous, internationally accepted framework.

Here is what the certification is, what it covers, and why it matters for your digital signage projects.

What is ISO/IEC 27001?

ISO/IEC 27001 is the internationally recognized standard for managing information security. It asks organizations to identify the risks to the data they handle, put controls in place to address those risks, and keep reviewing and improving their security practices over time.

It is not a self-declaration. Certification is granted only after an accredited third party audits the organization against every requirement of the standard.

What the certification covers

The scope of OnSign's certification covers the development, operation, and maintenance of the OnSign SaaS digital signage platform. In practice, that means the full lifecycle of the product you use: how we build new features, how we run the platform day to day, and how we keep it up to date.

"Earning ISO 27001 certification across the development, operation, and maintenance of our platform gives our customers independent confirmation that the way we protect their data follows a rigorous, internationally accepted framework," said Dimitri Prado, Managing Director at OnSign.

What it means for customers and integrators

The certification gives you audited evidence of how OnSign handles security, instead of a promise. That has practical benefits:

• For enterprise buyers, it can make vendor security reviews faster and simpler, since many security questionnaires already reference ISO 27001.

• For Pro AV integrators, it is a strong asset when responding to security requirements in client proposals and tenders, especially in regulated sectors like healthcare, finance, and government.

• For every customer, it is a clear sign that the content and data you manage on OnSign are protected by a structured, independently verified process.

What changed inside OnSign

Preparing for the audit pushed us to raise the bar across the company. As part of the certification process, we formalized our risk assessment procedures, expanded security training for every employee, and strengthened access controls across our infrastructure.

These changes are not just paperwork. They shape how our team works every day, from writing code to supporting customers.

A commitment, not a one-time milestone

ISO 27001 does not end with the certificate. The standard requires ongoing monitoring, regular internal audits, and annual recertification.

"ISO 27001 is not a one-time milestone for us," said Eduardo Castegnaro, Director of Technology at OnSign. "The standard requires ongoing monitoring, internal audits, and annual recertification, which means our security practices will keep evolving alongside the threats our customers face."

Want to learn more about how OnSign protects your data? Visit our Security Page for details on our security and compliance practices, or talk to our team about your next project.