LIKE MAGIC AG certified to ISO/IEC 27001
Information security independently verified
An audit by the independent certification body Sensiba shows that data and systems are systematically protected.
LIKE MAGIC AG, which operates a digital platform for hotels, has been certified to ISO/IEC 27001:2022 since 24 September 2026. The accredited certification body Sensiba audited the company's information security management system (ISMS) in two stages.
The certification has practical value for the more than 150 hotels that, according to the company, work with LIKE MAGIC. The platform handles bookings, digital registration forms and payments, which involve some of the most sensitive data a hotel has.
Assessing software suppliers often means working through long security questionnaires. The certificate should reduce this effort. Instead of answering each question separately, LIKE MAGIC points to the certification and provides details on request.
“Hotels entrust us with their guests' most sensitive data. We would rather back up that trust with evidence than simply ask for it. The certification shows that our security works every day, not only on the day of the audit,” says Adrian Schmidt, CISO of LIKE MAGIC AG.
According to the company, it monitors its controls continuously and automatically between audits.
ISO/IEC 27001 does not prescribe any particular technology. It requires companies to identify, assess and address risks systematically, for example in relation to access rights, encryption, suppliers, emergency planning and the handling of security incidents. The auditors check whether these rules are followed in everyday work.
The certification is also useful for data protection officers. As a processor, LIKE MAGIC must demonstrate technical and organisational measures under Articles 28 and 32 of the GDPR. ISO/IEC 27001 is not a GDPR certification, but it provides independently audited evidence of such measures.
The certification applies to the company, not to a single product. Its scope covers the development and operation of the platform, including Digital Guest Journey, Operations Platform, Managed API and Booking Engine/IBE, as well as the Executive Board, HR, IT, Product and Customer Support & Success teams. The certification does not guarantee that no incidents will occur.
The certificate is valid until 24 September 2029. Sensiba reviews it every year, and recertification is due after three years. Hotels, partners and the media can verify the certificate directly with Sensiba.
At a glance
Company: likeMagic AG (LIKE MAGIC), Dübendorf (Switzerland)
Standard: ISO/IEC 27001:2022
Certification body: Sensiba Australia Pty Ltd, accredited by IAS (MSCB-379), part of the IAF Multilateral Recognition Arrangement
Certificate: No. 202609-319, issued 24 September 2026, valid until 24 September 2029, annual surveillance audits
Scope: design, development, operation and delivery of the digital hospitality platform
Verification: [email protected], quoting the certificate number
likeMagic AG (LIKE MAGIC) has been certified to ISO/IEC 27001:2022 since 24 September 2026 (certificate no. 202609-319). The accredited certification body Sensiba examined the company's information security management system in a two-stage audit. The ISMS covers the development, operation and delivery of the digital hospitality platform, including Digital Guest Journey, Operations Platform, Managed API and Booking Engine. The certification is confirmed annually through surveillance audits.
