Bannify documents trust and security practices with reference to leading payment, service-control, and information-security frameworks.
1. PCI DSS Reference
Payment card processing is delegated to qualified payment providers; Bannify does not store sensitive card authentication data.
2. SOC 2 Principles
Operational controls should align with security, availability, processing integrity, confidentiality, and privacy principles.
3. ISO 27001 Alignment
Security management should include risk assessment, access control, incident response, and continuous improvement.
4. Vendor Controls
Critical vendors should demonstrate security controls appropriate to their role in Bannify operations.
5. Continuous Improvement
Controls and documentation should be reviewed regularly as the product and customer base evolve.
Product scope and implementation — September 2026
Bannify provides banner editing, preview, script installation, configurable forms and consent interfaces. These tools support an operator’s implementation; they do not by themselves establish compliance or certification. The operator must review the actual published content, trackers, callback recipients and processing purposes. Account deactivation is distinct from physical deletion, and privacy requests may require verification. Read the current Privacy and Cookie policies together with this regional information.