Information security / Privacy certification acquired – Coupang! Privacy Notice Center(Coupang Taiwan)-ENG

To keep customers’ valuable information safe and secure, Coupang has acquired and maintained
the following domestic and international information security and privacy certifications.

ISMS-P / ISMS

ISO27001

ISO27701

ISO27017

CBPR

PCI DSS

ePRIVACY

Information Security and Privacy Management System Certification (ISMS-P)
Information Security Management System Certification (ISMS)

ISMS-P certifies that measures and activities that meet the certification criteria have been taken to ensure information protection and privacy Certification Scope

Certification Scope

[Coupang Corp.] ISMS-P : Coupang services
[Coupang Pay, Ltd.] ISMS : Coupang Pay’s electronic financial service operations (prepaid electronic payments, electronic payment gateways, payment depository) – excluding unexamined physical infrastructure
[ddnayo Inc.] ISMS: ddnayo Online Reservation Service (Excluding unassessed physical infrastructure and SaaS infrastructure areas)

Effective Period

[Coupang Corp.] ISMS-P : 2024-03-03 – 2027-03-02
[Coupang Pay, Ltd.] ISMS : 2025-06-27 – 2028-06-26
[ddnayo Inc.] ISMS: 2026-09-02 ~ 2029-09-01

ISO/IEC 27001

ISO/IEC 27001 is a global information security management system certification that meets information security requirements established by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

Certification Scope: [Coupang Corp., Coupang Taiwan Co., Ltd.] Coupang Services
Effective Period: [Coupang Corp., Coupang Taiwan Co., Ltd.] 2025-04-26 ~ 2028-04-25

ISO/IEC 27701

ISO/IEC 27701 is a global privacy management system certification that meets data protection requirements, established by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

Certification Scope: [Coupang Corp., Coupang Taiwan Co., Ltd.] Coupang Services
Effective Period: [Coupang Corp., Coupang Taiwan Co., Ltd.] 2025-04-26 ~ 2028-04-25

ISO/IEC 27017

ISO/IEC 27017 is a global certification for information security management for cloud services, established by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

Certification Scope: [Coupang Corp., Coupang Taiwan Co., Ltd.] Coupang Services
Effective Period: [Coupang Corp., Coupang Taiwan Co., Ltd.] 2025-04-26 ~ 2028-04-25

APEC / Global CBPR

The Cross-Border Privacy Rules (CBPR) certifies that we process personal information securely while meeting the cross-border transmission standards in accordance with international standards.

Certification Scope: [Coupang Corp.] Coupang services (including Eats, Play, R.Lux, Biz), Supplier Hub, Wing, Marketplace, and 10 other services
Effective Period: [Coupang Corp.] 2025-08-05 ~ 2026-08-04

PCI DSS

Payment Card Industry Data Security Standard certification is an international data security standard developed to enhance and promote the security of credit card data.

Certification Scope

[Coupang Pay, Ltd.] Coupang Pay Global Payment Gateway Service
[Coupang Taiwan Co., Ltd.] Taiwan E-Commerce

Effective Period

[Coupang Pay, Ltd.] Coupang Pay Global Payment Gateway Service : 2026-06-30 ~ 2027-06-29
[Coupang Taiwan Co., Ltd.] Coupang Taiwan E-Commerce : 2026-06-30 ~ 2027-06-29

ePRIVACY

ePRIVACY certification certifies a website's compliance with privacy laws and safe processing of personal information.

Certification Scope: [Coupang Corp.] Coupang (https://www.coupang.com)
Effective Period: [Coupang Corp.] 2026-07-01 ~ 2027-06-30