Compliance frameworks, security audits, and quality certifications this company maintains.
Information Security
ISO 27001:2022
ActiveTucows maintains ISO 27001 certification for information security management across its domain, fiber, and platform businesses, protecting customer data and critical internet infrastructure.
Security & Trust
SOC 2 Type II
ActiveWavelo and Tucows Domains hold SOC 2 Type II attestation, providing enterprise operator and reseller customers with independent assurance of security, availability, and confidentiality controls.
Domain Regulation
ICANN Accreditation
ActiveTucows operates as an ICANN-accredited registrar for both OpenSRS and Enom platforms, maintaining compliance with ICANN Registrar Accreditation Agreements, WHOIS accuracy requirements, and UDRP dispute policies.
Payment Security
PCI DSS v4.0
ActiveTucows maintains PCI DSS compliance for all payment card processing across its domain registration, fiber subscriber billing, and Wavelo platform, protecting cardholder data for millions of transactions.
Tucows maintains full GDPR compliance for processing of personal data for European domain resellers, fiber customers, and Wavelo platform users, including lawful data processing, consent management, and data subject rights.
Canadian Privacy Law
PIPEDA
ActiveAs a Canadian company, Tucows complies with PIPEDA (Personal Information Protection and Electronic Documents Act) for collection, use, and disclosure of personal information about its Canadian customers and employees.
Telecom Equipment
FCC Part 68
ActiveTing Internet's customer premises equipment and network interfaces comply with FCC Part 68 rules for connection of terminal equipment to the telephone network, applicable to Ting's US fiber deployments.
Tucows Domains supports DNSSEC (Domain Name System Security Extensions) across its registrar platforms, enabling resellers and registrants to cryptographically sign DNS records for protection against cache poisoning attacks.
Internet Standards
RFC Standards (IETF)
ActiveTucows OpenSRS and Enom platforms implement IETF RFC standards for domain registration protocols including EPP (RFC 5730-5734) for communication with domain registries and DNS record management.
Ting Internet complies with CALEA (Communications Assistance for Law Enforcement Act) requirements for lawful intercept capabilities in its US fiber network, as required of all US broadband providers.