Skip to main content
If your procurement or compliance team needs documentation about how we secure our infrastructure, this page sets out what exists today and how to request it.

​
ISO/IEC 27001

ISO 27001 certification is held within the hosting.com group, but not yet across all of it. The certified entity is Netregistry Pty Ltd in Australia, which covers the Webcentral and Melbourne IT brands. It does not currently extend to every company or brand in the group, including hosting.com. We are actively working to extend ISO/IEC 27001 to a group-wide certification. If your assessment requires the existing certificate, open a support ticket and tell us which legal entity your service sits under. We can then tell you whether your environment falls inside the certified scope, which is the question most vendor assessments are really asking.

​
SOC 2 and SOC reports

We do not hold SOC 2 certification and we do not issue SOC reports. This includes SOC 1 Type II and SOC 2 Type II reports, and letters confirming certification status. If a vendor assessment lists a SOC 2 report as mandatory, tell us early rather than late. We would rather explain what we can evidence instead than have you discover the gap at the end of a procurement cycle.

​
What we can provide

For a vendor security assessment, the following are available:
  • The ISO 27001 certificate for the certified entity, where it is relevant to your service
  • Data centre information — location, tier rating, and power and cooling redundancy for the facility your service runs in
  • Infrastructure security detail — DDoS protection, web application firewall, malware scanning, patching and access control
  • Our published policies — the terms and conditions and acceptable use policy cover our security and data handling commitments
To request any of these, open a support ticket at https://my.hosting.com. Include the assessment or questionnaire itself if you have one, because it is usually faster for us to answer your questions directly than to guess which documents you need.

​
Other compliance questions