Trust Center
WPP Open is WPP’s AI-enabled marketing platform, designed to support the end-to-end marketing process, including creative development, production, media, customer experience, PR, collaboration and workflow automation.
We recognise that our clients trust WPP Open with valuable brand assets, confidential business information, campaign materials and marketing data. Protecting that information is central to how WPP Open is designed, operated and continuously improved.
WPP Open combines WPP’s experience serving global enterprise clients with modern cloud architecture, approved enterprise technology providers and a mature security governance model. Our approach is designed to protect client data, support responsible use of AI-enabled capabilities and provide customers with confidence in the security, resilience and governance of the platform.
Our Commitment to Security
Security is embedded into the design, operation and governance of WPP Open. Our security programme is aligned with recognised industry standards and frameworks, including ISO/IEC 27001:2022, SOC 2 and NIST-aligned practices.
WPP Open has completed SOC 2 Type I assurance, is progressing SOC 2 Type II readiness and operating effectiveness activity, and is actively pursuing ISO/IEC 27001:2022 certification**.
Our approach includes:
Strong Security Controls
WPP Open uses layered technical and organisational controls to protect the confidentiality, integrity and availability of client data. These include identity and access management, role-based access control, least privilege, encryption in transit and at rest, cloud-native security controls, logging and monitoring, vulnerability management, secure development practices and independent security testing where applicable.
Experienced Security and Privacy Governance
WPP Open is supported by experienced security, privacy, legal, risk, engineering and operational teams. Oversight includes WPP’s Data Protection, Privacy, Information Security, Technology Risk and Compliance functions, with governance designed to ensure that security and privacy considerations are embedded throughout the platform lifecycle.
Proactive Security and Continuous Improvement
WPP Open maintains a proactive security posture through ongoing monitoring, vulnerability management, cloud security posture review, penetration testing, supplier assurance and incident response processes. Security findings are risk-rated, tracked and remediated through established governance processes.
As the threat landscape evolves, WPP Open continues to strengthen its control environment, platform resilience and customer assurance capabilities.
