Security and ISO 27001

Working towards ISO 27001

ISO 27001 is the international standard for managing information security. We aren't certified yet. We're putting the standard's controls in place now and plan to be audited for certification in 2027. We'll update this page when we are, and we won't use the ISO name or logo as if we were certified before then.

Voucher Magpie is part of Digital Gnome, a small Welsh technology business that also runs a cyber security service for individuals and small businesses, so security is part of what we do every day.

What we do now

• We collect as little as we can. Most people use the site without an account. If you sign up, we hold your email address, an optional name and the cause you support. We never see or store card details: you pay the shop directly.
• No passwords to steal. Shopper accounts sign in with a one-time link sent by email, which expires after 30 minutes and works once.
• Encrypted connections. The whole site runs over HTTPS, and Cloudflare sits in front of it to block attacks.
• Limited access. Only the people who run the site can reach its systems and data, and the admin area needs its own password.
• Backups. We back up the site's content before every change to it.
• The browser extension stays private. It matches the shop you're on against our store list on your device, so the sites you visit are never sent to us. See the privacy policy.

Found a security problem?

Please tell us privately so we can fix it before anyone misuses it. Our vulnerability disclosure policy explains how, and what we promise in return.

Related policies

• Privacy policy: what we collect, why, and your rights
• Code of conduct: the principles we work by
• Whistleblowing policy: how to raise a concern about wrongdoing