Mezzanine Ware (Pty) Ltd holds an ISO 27001:2013 certification, which is a globally trusted standard for Information Security. This certification was issued by BSI (British Standards Institute). Having an ISO 27001 certification demonstrates that the company has information security policies and controls that meet the requirements and guidelines of the standard. The certification is reviewed annually with an external surveillance audit. The certification covers the entire company and ensures that all staff members have been trained in Information Security and Risk Management, and that it is effectively applied through an Information Security Management System (ISMS).

• Country specific Ministry of Health (or nominated party) is the owner and Responsible Party of Information and data processed by the mVacciNation Application. Vodacom and Mezzanine has stringent technical and best practice procedures in place to ensure the integrity of Personal Information is safeguarded against the risk of loss or damage and against the unauthorised or unlawful access.

• All our systems are Protection of Personal Information (POPI) compliant and allow for capturing of user and client consent in the case of capturing personal information.

• Security is based on at least 99% Availability Service Levels and ISO 27001:2013 framework, which is the international standard that describes best practices and controls for an ISMS. 

• All products are built with open architecture for interoperability and alignment with local standards.