Lanzhao certified to ISO/IEC 27001 for information security management

Nanjing Lanzhao Information Technology Co., Ltd. has formally obtained ISO/IEC 27001 certification for information security management. The scope covers the development, delivery and operation of our checkout systems, store operating data and cloud services.

What it means for a store

• Data is encrypted in transit and at rest; store and customer information is accessed on a least-privilege basis;
• Access is traceable to a person: who viewed which category of data, and when, is logged;
• There are executable emergency procedures: backup, recovery and incident response are drilled to a standard process, not just written on paper.

How we see it

When a store hands us its checkout and inventory, it is really handing us its ledger. That trust should not rest on a promise alone. Certification turns it into a process a third party can inspect.

The company will continue to undergo annual surveillance audits and will extend the same security requirements to its suppliers and partners.