Maya secures ISO recertifications, strengthens customer-driven security framework

By TechWatch PH Staff

Maya Philippines Inc. and Maya Bank Inc. have successfully renewed their International Organization for Standardization (ISO) certifications—maintaining their standing as the first digital bank and among the earliest fintech firms in the country to uphold global standards for information security and privacy management.

Both entities retained their ISO 27001 certification for information security management systems and ISO 27701 certification for privacy information management—first earned in 2022 and 2023, respectively—after passing annual audits and recertification reviews.

“At Maya, security is central to every product we design, putting protection directly in our customers’ hands,” said Dr. Ken Baylor, Group Chief Information Security Officer of Maya. “ISO 27001 and 27701 confirm that discipline—it means our customer data is protected to global standards and our in-built trust scales with our technology.”

The milestone coincides with Cybersecurity Awareness Month, reaffirming Maya’s commitment to integrating protection as a core part of everyday digital banking.

Maya embeds risk management and privacy safeguards from the earliest stages of product development, ensuring each feature is designed to address both current and emerging cyber threats.

The company adheres to global best practices aligned with the Philippines’ Data Privacy Act of 2012 and the European Union’s General Data Protection Regulation (GDPR).

Together with its Payment Card Industry Data Security Standard (PCI DSS) certification and recognitions from the National Privacy Commission—including the “Privacy Initiative of the Year” award in 2022—Maya continues to set the benchmark for digital trust in Philippine finance.

Its in-app Security Center empowers users with real-time control, allowing them to freeze or unfreeze cards, set transaction limits, and manage access channels instantly. These are reinforced by biometric logins, one-time passwords, and AI-driven fraud detection that identifies suspicious activity before it happens.

“Security shouldn’t just work hard in the background. Customers must be able to take direct security actions so they feel in control,” said Shailesh Baidwan, President of Maya Group and Co-Founder of Maya Bank. “Maya’s approach makes protection tangible for customers. That shift is critical given fraud is rising globally and customer confidence and trust are key.”

Beyond its technological safeguards, Maya actively promotes fraud awareness through campaigns and partnerships with both public and private sectors. Its Scam Patrol campaign educates users on detecting fraudulent activity and supports the #ScamWatch initiative led by the Cybercrime Investigation and Coordinating Center (CICC) and Scam Watch Pilipinas.

The company also co-founded PROTECTA PILIPINAS Fintech with the Department of Information and Communications Technology (DICT), the Philippine National Police (PNP), the Securities and Exchange Commission (SEC), and major telecommunications providers to strengthen the country’s fraud-prevention ecosystem.