Trust Center - Security

We employ robust security measures to protect customer data. This includes encryption for data in transit and at rest, compliance with GDPR and other applicable laws, and a cloud-native infrastructure following Zero Trust principles. Access to data is restricted based on the principle of least privilege, and comprehensive monitoring is in place to detect and respond to potential threats.

Yes, we have been ISO 27001:2013 certified since 2022. The certification of our ISMS covers all of our development and production of Wolt products. See more in this blog post.

We are also PCI-DSS certified as we process payment information.

Yes! We run our bug bounty program on Intigriti, there you can find our scope and are free to enroll to our program. Happy hacking!

We have a vulnerability management process that includes regular scanning, timely patching, and a protocol for escalating and resolving critical vulnerabilities.

We conduct thorough due diligence on all third-party vendors and require them to adhere to our security standards. Vendors go through a standardised vendor management process and onboarding where security and privacy aspects are assessed and reviewed. Security and privacy topics are incorporated into standard contract clauses.

We ensure the physical security and safety of our premises through access control systems and a dedicated physical security team responsible for implementing and maintaining robust security measures. All production data is stored in outsourced data centers.

Yes, all employees undergo mandatory security awareness training annually, with additional targeted training for specific roles as needed.

In the event of a data breach or any other incident, we follow our incident response plan, which includes assessing the risk of exposure of personal data or classified information, containment of the underlying root cause and contacting of relevant stakeholders in accordance with legal requirements.

A good place to start would be to check out our Security Whitepaper, available to everyone.