Infrastructure
Milan, IT
Campaign data is hosted on infrastructure in Milan, Italy. Data location is part of the project, alongside security controls and compliance requirements.
Security built for the Enterprise.
Webing combines an ISO/IEC 27001:2022-certified management system, hosting in Italy and documented security controls.
- ISO/IEC 27001:2022
Certified security management.
- EU Region
Hosted in Milan, IT, within the EU.
- EU and UK GDPR
Data protection and consent management.
- Public Trust Center
Certifications, controls and security documentation.
Enterprise security
Enterprise-grade
Security and Compliance
Data protection is built into our systems and procedures. Controlled access, encryption and monitoring support platform security within a certified management system.
ISO 27001 v2022
GDPR
UK GDPR
Security controls
Protection at every level.
Documented, monitored controls protect data, access and infrastructure. The Trust Center brings the details together.
Access
Controlled access
Access to critical systems is authorised according to role and operational need, with regular permission reviews.
Encryption
Data protected, including in transit
Production databases containing customer data are encrypted. Data transmission is protected by HTTPS and TLS.
Continuity
Continuity and data recovery
Regular backups and integrity checks support data recovery. Procedures and testing prepare the team to manage disruption.
Monitoring
Prevention and response
Security event monitoring, vulnerability assessments and response procedures help identify and manage risks.
Where data lives
Your data. In Europe.
Compliance
EU and UK GDPR
Data management follows EU and UK GDPR. Webing processes campaign data on behalf of your brand, with defined roles and responsibilities.
Consent
Traceable consent
The entry journey collects the data and consent required by the campaign. Expressed preferences remain linked to each entry.
Trust Center
Ready for your legal team.
Certifications, controls and suppliers are publicly available without contacting us. Policies can be requested through the Trust Center.
- Certification and complianceISO/IEC 27001:2022 certification. EU and UK GDPR compliance. Documentation
- Security controls58 controls across six areas, from product to corporate Public
- Policies and procedures38 management system policies and documents On request
- Sub-processors9 suppliers, each with a stated role Public list
FAQs
Security and data FAQs
Is Webing ISO 27001 certified?
Yes. Webing Ltd is ISO/IEC 27001:2022 certified. The certificate is publicly available as a PDF and can be verified through Intercert’s official service.
What does the certification cover?
Development, operation, maintenance, support and delivery of the Webing Plus platform for consumer activation campaigns and digital prize promotions, including the processing of client and participant personal data.
Where is campaign data stored?
Campaign data is hosted on infrastructure in Milan, Italy.
Who is the controller of campaign data?
The brand promoting the campaign. Webing acts as its data processor under GDPR and, for UK clients, UK GDPR.
How is access controlled?
Access to critical systems is authorised according to roles and operational needs and reviewed regularly. The Trust Center describes the controls in place.
Where can I find security policies and documents?
Webing’s Trust Center presents certifications, security controls and resources. Policies are listed and can be consulted through an access request.
