SECURITY & COMPLIANCE
Carriyo is ISO 27001:2022 certified and runs on AWS across multiple availability zones, with data encrypted at rest and in transit and a 99.9% uptime commitment. The platform has processed $5B in shipped goods for enterprise retail brands.
99.9%
Uptime SLA
ISO 27001
Certified since 2024
$5B
In goods shipped
140+
Carriers connected
CERTIFICATIONS & COMPLIANCE
Carriyo FZ-LLC is ISO/IEC 27001:2022 certified by ARS Assessment, first certified in December 2024. The certificate covers the provision of our delivery management and shipping software and associated support services.
Carriyo has not yet completed a SOC 2 audit. A SOC 2 Type II programme is planned for 2027 and will build on our ISO 27001 controls. Our ISO 27001 certificate is available on request.
Carriyo processes personal data as a processor on behalf of its customers, under its Data Protection and Privacy policies. We assist customers in responding to data subject requests.
Carriyo does not store payment card data. Subscription billing is handled by Stripe, a PCI DSS Level 1 certified payment processor.
INFRASTRUCTURE
Deployed on AWS across multiple availability zones in the EU (Ireland) and designed to fail over between zones. A cross-region standby is available as an optional paid service.
Automated, encrypted backups and redundancy across availability zones. A cross-region standby is available as an optional paid service.
Managed auto-scaling adjusts capacity as demand changes, including peak periods such as Black Friday and Ramadan. Capacity is monitored through AWS CloudWatch.
Data is encrypted at rest (AES-256) and in transit (TLS 1.2 or higher). Database backups are encrypted, with keys managed through AWS KMS.
Web application firewall on public endpoints, AWS Shield Standard DDoS protection, and segmented private networks. API requests are authenticated.
Automated infrastructure monitoring and alerting through AWS CloudWatch and CloudTrail. Documented incident response procedures with severity levels, post-incident reviews, and customer notification.
ACCESS & IDENTITY
POLICIES & DOCUMENTATION
Our security policy covering data protection, access controls, and incident response.
Read policy →How we collect, use, and protect personal data.
Read policy →Our terms of service governing the use of the Carriyo platform and related services.
Read policy →We are happy to walk through our security architecture, share our ISO 27001 certificate, or complete your vendor security assessment.