Wowza’s ISO/IEC 27001 Certification For Security Reviews
Certified By A-LIGN, Accredited By ANAB And UKAS
Wowza Media Systems is certified to ISO/IEC 27001:2022, the international standard for information security management. A-LIGN, an ISO/IEC 27001 certification body accredited by ANAB and UKAS, issued the certificate on August 20, 2026, and it remains valid through August 20, 2029. The scope covers the information security management system behind Flowplayer OVP, the managed platform Wowza operates, plus how Wowza builds, patches, and supports Wowza Streaming Engine. Security, procurement, and vendor risk teams can request the certificate directly from Wowza Information Security by emailing security@wowza.com to move their review forward with accredited evidence.
What Wowza’s ISO 27001 Certification Covers
Wowza’s ISO/IEC 27001:2022 certificate confirms that Wowza runs a governed information security management system (ISMS). A-LIGN audited how Wowza assesses risk, controls access, manages change and code review, responds to incidents, vets its suppliers, and reviews performance on a defined cycle. The certified scope covers the ISMS behind Wowza’s managed platform, Flowplayer OVP, as well as Wowza’s processes for building, patching, and supporting Wowza Streaming Engine, together with the supporting corporate functions and cloud infrastructure. For the audit, A-LIGN examined controls across:
- Data protection
- Access management
- Secure development
- Vulnerability management
- Resilience
- Governance
Assurance For Managed And Self-Hosted Deployments
When you run Wowza Streaming Engine in your own environment, your team operates and controls the deployment. Wowza’s credentials cover the work upstream of that install, including how Wowza designs and builds the software, reviews changes, handles vulnerabilities, delivers releases, and runs support.
Wowza operates Flowplayer OVP as a managed platform, so the ISO/IEC 27001 certificate and SOC 2 Type II report cover Wowza’s operation of that service most fully. A-LIGN audited the controls that protect customer data, manage access, address vulnerabilities, and keep the platform resilient.
Pair The ISO Certificate With The SOC 2 Type II Report
Wowza is certified to ISO/IEC 27001:2022 and completed a SOC 2 Type II examination for 2026 with an unqualified opinion, both independently audited by A-LIGN. The ISO/IEC 27001 certificate confirms that Wowza runs a governed information security management system. The SOC 2 Type II report shows how specific controls operated across the May 1, 2026 to July 31, 2026 examination period.
Learn what each credential proves and where the two differ.
Plan Your Review Around The Certification Cycle
Wowza’s ISO/IEC 27001 certificate runs on a three-year term, from August 20, 2026 through August 20, 2029. A-LIGN conducts surveillance audits during the term to confirm the ISMS continues to operate as certified, and a full recertification audit takes place before the term ends. If your review also needs current SOC 2 coverage, reach out to security@wowza.com.
Evidence your reviewers can verify
Accredited Certification Body
A-LIGN, accredited by ANAB and UKAS, issued the certificate, and your reviewers can validate it directly with A-LIGN.
Governed Over Time
Surveillance audits across the three-year term confirm that Wowza’s ISMS continues to operate, measure, and improve.
Defined Scope
The certificate names the standard, the certified scope, and the in-scope location so your reviewers know exactly what A-LIGN audited.
A Direct Line To Security
Wowza Information Security owns the certificate and answers deployment-specific questions at security@wowza.com.
Wowza ISO 27001 Certification FAQs
Is Wowza ISO 27001 certified?
Yes, Wowza Media Systems is certified to ISO/IEC 27001:2022. A-LIGN issued the certificate on August 20, 2026, and it remains valid through August 20, 2029, with surveillance audits during the term. The certified scope covers the ISMS behind Flowplayer OVP, plus how Wowza builds, patches, and supports Wowza Streaming Engine.
How do I request Wowza’s ISO 27001 certificate?
Email Wowza Information Security at security@wowza.com. Name the person who should receive the certificate and describe the reason for the request. You can request a SOC 2 Type II report in the same email. Customers, prospective customers, and business partners can request the certificate, and anyone in an active conversation with a Wowza account team can ask that team to submit the request.
What does Wowza’s ISO 27001 certification cover?
Wowza’s ISO/IEC 27001 certification covers the information security management system that supports the design, development, operation, and delivery of Wowza’s streaming software and managed video platforms, along with the supporting corporate functions and cloud infrastructure. Within that scope, A-LIGN audited controls for data protection, access management, secure development, vulnerability management, resilience, and governance.
Who certified Wowza to ISO 27001?
A-LIGN Compliance and Security, Inc. certified Wowza. A-LIGN is an ISO/IEC 27001 certification body accredited by the ANSI National Accreditation Board (ANAB) and the United Kingdom Accreditation Service (UKAS). Accreditation means an independent authority oversees how A-LIGN audits organizations and issues certificates.
Does Wowza’s ISO 27001 certification cover a Wowza Streaming Engine deployment I host myself?
When you host Wowza Streaming Engine in your own environment, your organization operates the deployment and owns the controls around it. Wowza’s ISO/IEC 27001 certification covers Wowza as the organization that designs, builds, patches, releases, and supports the software. The certification applies to Wowza’s management system and does not certify Wowza Streaming Engine as a product. For Flowplayer OVP, Wowza operates the platform, so the certified ISMS covers that service directly.
Does Wowza’s ISO 27001 certification make my organization compliant with GDPR, HIPAA, or FedRAMP?
Wowza’s ISO/IEC 27001 certification covers Wowza’s own controls and does not make any customer compliant with regulations or frameworks. For questions about a specific framework, email security@wowza.com.
How long is Wowza’s ISO 27001 certificate valid?
Wowza’s ISO/IEC 27001 certificate remains valid through August 20, 2029. A-LIGN conducts surveillance audits during the three-year term, and a full recertification audit takes place before the certificate expires. If your review also needs SOC 2 coverage, contact security@wowza.com.
Does Wowza also have a SOC 2 Type II report?
Yes, Wowza completed its 2026 SOC 2 Type II examination covering the Security and Availability trust services criteria for May 1, 2026 to July 31, 2026, and A-LIGN issued an unqualified opinion. Email security@wowza.com to request a copy of the report, alongside the ISO/IEC 27001 certificate.