The evidence behind the badges
ISO 27001:2022 is a certificate, not a logo. Here is the number, who issued it, what it covers, how we prove the team is office-based, and where our clients leave reviews.
ISO 27001:2022 at a glance
- Standard
- ISO/IEC 27001:2022 information security management
- Certified entity
- TaskTango (OPC) Private Limited, Barnala, Punjab, India (the delivery centre)
- Certificate
- 305026102652IS
- Issued by
- QRO
- Scope
- The information security management system supporting the provision of mortgage processing and financial services solutions, business process management (BPM) for accounting and logistics, digital transformation, AI automation, cloud solutions, custom web development and brand design services (statement of applicability v3.6, 17 December 2025)
- Valid to
- 25 October 2027 (recertification due 25 October 2029)
- Last audit
- Certification audit, 26 October 2026
Controls you can check, not promises
The parts of our information security management system that matter most to a firm handing us client files.
Office-based only
All delivery staff work from our office. No home working, no personal devices, no files leaving the building.
Role-based access
Access to your systems is granted per person, per role, reviewed quarterly and revoked the day someone leaves.
Audit trail
Pulse records every sign-in, edit and approval with before-and-after values. Your own systems keep their own logs.
NDA and DPA as standard
Every engagement is covered by a non-disclosure agreement and a data processing agreement aligned with UK GDPR or the Australian Privacy Act.
Vetted people
Identity, address and reference checks before day one, and a three-week induction that includes security training.
Data residency
Pulse is hosted in London or Australia. A dedicated instance is available where a client requires it.
How we prove nobody works from home
Every member of your team signs in and out of Pulse from the office. The register shows presence, breaks, half days and leave for each person, and clients can ask for their team's register at any time.
From 2026, every sign-in also carries GPS coordinates, the device used and a selfie checked against the person's profile photo, and your Pulse workspace shows a live "who is in" board for your team.
Pulse HR attendance roadmap
What clients say, in their own words
Named testimonials from brokers and business owners, with the outcome each one describes. Public review listings for Pulse are being set up on Capterra and G2.
Broker testimonials
Six named brokers and operations managers on what changed when their files moved to a Task Tango team.
Read themCase studies
Evergrow Finance, DDRT and Dream Engineering & Fabrication: what was built and how it is used every day.
Read the storiesCapterra and G2
Pulse Boards listings are being set up. Until they are live, ask us for a reference call with a Pulse customer.
"The team is highly organised, responsive, and always across the finer details that matter in complex files. Having Task Tango behind the scenes has improved turnaround times and overall workflow, making client outcomes smoother and more efficient. A truly valuable support team for any broker."
Faster turnaround on complex files
"They have consistently provided well-trained staff who integrate seamlessly into our processes. We truly value their continuous support, professionalism and reliability, which have made a noticeable difference to our day-to-day operations."
Trained staff integrated into the brokerage's own process
"Task Tango has been an absolute game-changer for my business. Before we started using them, my team and I were overwhelmed, but their team stepped in and brought immediate order to the chaos and assisted by streamlining the loan application process."
Loan application process streamlined; the in-house team is no longer overwhelmed
Security questions
Anything else? Ask on your consultation call or email admin@tasktango.co.
Can we see the certificate itself?
Yes. The certificate number is 305026102652IS, issued by QRO and valid to 25 October 2027 (recertification due 25 October 2029). Request a copy from your account manager, together with the statement of applicability, and we will send both the same day.
Where is client data stored?
In your own systems, which your team works inside. Pulse instances are hosted in the UK (London) or Australia under our certified controls, with a dedicated instance available for firms that need it.
Does anyone work from home?
No. Attendance is signed in Pulse from the office network, and from 2026 every sign-in carries GPS, device and a selfie check against the profile photo. Clients can ask for the attendance register for their team at any time.
Do you sign NDAs and data processing agreements?
Every engagement is covered by an NDA, and we sign a data processing agreement aligned with UK GDPR or the Australian Privacy Act, whichever applies to you.
Who can access our files?
Only the people on your team, through accounts you grant in your own systems. Access is role-based, reviewed quarterly and removed the day someone leaves.
Need a security questionnaire completed?
Send us your vendor assessment or due-diligence form and we will return it, with evidence, within five business days.