Home / Trust and security

How EcpPro protects your tenants and your clients' data

Everything a security reviewer needs in one place.

ISO 27001

EcpPro holds ISO 27001 certification for information security management.

Download the certificate (PDF)

SOC 2

A SOC 2 assessment completed with Accorp Partners. The report is shared case by case under a non disclosure agreement.

Request the report

Access you control

Granular rights per feature. EcpPro roles are separate from Microsoft 365 roles, and portal access never raises a client's Microsoft 365 privileges.

Every action accountable

Logged in EcpPro against the named individual who took it, and recorded in Azure as well.

Safe by design

Changes that touch a live tenant are deliberate. Compliance corrections need two separate switches.

Vulnerability disclosure

Report a security issue to security [at] ecppro.com. We usually respond within 24 hours and reward valid reports.

Data residency

Hosted in your clients' region

AustraliaAustraliaLocal Azure datacentres
United StatesUnited StatesLocal Azure datacentres
United KingdomUnited KingdomLocal Azure datacentres
ISO 27001SOC 2

Legal documents

Service Level Agreement

Availability and service credits.

Terms of Service

The agreement for using EcpPro.

Privacy Statement

How we handle personal information.

Questions from your security team?

We are always happy to arrange a conversation with the right person on our side.