Review the security and privacy foundations of the company behind WiseFin, and the data arrangements we address with each partner.
WiseFin is operated by Chengdu Weisifan Technology Co., Ltd., the company behind Zhibao Cloud. Its certifications cover information security, privacy management and personal information protection within the scopes below.
Read the original certificates and follow their verification links. All four linked records showed valid status on 12 September 2026.
Information security management
Information security management for the design, development and maintenance of insurance industry application software. Statement of Applicability: B/0.
Privacy information management
Privacy information management as a PII controller and processor for the design, development and maintenance of insurance industry application software. Statement of Applicability: B/0; based on the ISO/IEC 27001 certificate listed above.
Public-cloud personal information protection
Personal information protection in public cloud related to Zhibao Cloud Platform SaaS services, excluding branches. Applicability Declaration: C/0.
Personally identifiable information protection
Personally identifiable information protection management related to Zhibao Cloud Platform SaaS services, excluding branches. Applicability Declaration: C/0.
Certificates apply to the named holder and stated activities. The 27018 and 29151 scopes exclude branches. Ongoing validity depends on the applicable audit requirements; the 27001 and 27701 issuer records specify the next audit before 12 November 2026. The 27701 certificate is based on the listed 27001 certification.
We work with partners to align data residency and processing arrangements with applicable local data protection requirements.
Agree the locations of production data, backups and recovery environments as part of the deployment design.
Define controller and processor responsibilities, permitted support access, user roles and data-processing terms.
Address retention, return and deletion arrangements, along with incident-response responsibilities and escalation.
Review data flows to insurers, infrastructure providers and any AI or messaging services included in the project.
For deployments in Kenya, we work with partners to align data residency and processing arrangements with Kenya’s Data Protection Act, 2019.
Read the ODPC’s data protection principlesThese certifications support supplier due diligence. They do not constitute local insurance regulatory approval, data-protection registration or confirmation of a particular hosting location. Requirements are assessed for the contracting entity and deployment.
Start with the evidence, then discuss the details of your proposed deployment.
All four listed certificates are held by Chengdu Weisifan Technology Co., Ltd.. WiseFin is its international-facing brand. The exact scope and certificate holder are shown above.
Yes. Each record above includes the original English certificate PDF and its verification link. Our downloadable security and privacy brief brings the key information together.
The production, backup and recovery locations are agreed for each project. The location of this marketing website does not determine where your insurance platform will be hosted.
The proposed operating model should document who may access the environment, their permitted actions, approval and logging arrangements, and the responsibilities of the partner and WiseFin teams.
Certification provides evidence of the stated management systems and activities. Local registration, insurance permissions, data flows and production approvals require a separate assessment for the project.
Tell us where you want to take your insurance business. Let’s explore how the right technology can help.
Talk to our team