MoonPay has announced a significant milestone in its commitment to data privacy and security by achieving ISO 27701 certification, a leading international standard focused on the management of private information. This certification is a crucial extension of the ISO 27001 information security standard, which emphasizes the establishment and management of a Privacy Information Management System (PIMS).
ISO 27701 sets forth specific controls designed to protect personal data while ensuring accountability. By adopting this framework, organizations are guided on how to responsibly collect, process, and safeguard Personally Identifiable Information (PII), aligning with global privacy regulations.
Doug Innocenti, Chief Information Security Officer at MoonPay, expressed excitement over this achievement, stating, “Earning ISO 27701 shows our ongoing commitment to strengthening privacy and security across everything we do.” He further highlighted that this certification, along with their existing ISO 27001 and ISO 27018 certifications, showcases the maturity and robustness of MoonPay’s privacy and security programs. Innocenti emphasized the trust their customers place in the company, underscoring the importance of these certifications in bolstering that confidence.
The attainment of ISO 27701 serves as evidence of MoonPay’s continued efforts to enhance its Information Security Management System. In addition to ISO 27701, the company has also garnered other important certifications, including PCI DSS 4.0 and SOC 2 Type 2, which further underline its robust approach to information security and privacy management. This certification represents a proactive step toward ensuring compliance with evolving privacy laws and reinforcing the safeguarding of customer information.


