Mondo Gate AG, the company behind mygate, is certified to ISO/IEC 27001:2022. Here you will find the certificate details, the exact scope, and the places where you can confirm the certification independently of us.
Mondo Gate AG
ISO/IEC 27001:2022 · Information security
In short: you don’t have to take our word for security. It follows an international standard and is checked externally every year.
Who may access which information is defined and controlled. We process personal data in line with the GDPR.
Based on: Confidentiality, integrity and availability objectives; access control under Annex A
An accredited certification body audits us annually against our own rules. If requirements are no longer met, it can suspend or withdraw the certificate.
Based on: Surveillance audits in 2027 and 2028, recertification by 2029
Procedures for security incidents and outages are defined, so the response is orderly rather than improvised.
Based on: Incident management and business continuity procedures
The requirements apply not only internally but also to service providers and systems working for us.
Based on: Supplier security policy
A certificate is only worth as much as it can be checked. These three sources confirm the certification without you having to trust us. Search for Mondo Gate AG or the certificate number.
Tempo Audits carried out the audit and issued the certificate. The original is hosted there.
tempoaudits.comUKAS, the UK accreditation service, oversees Tempo Audits and runs a public register of accredited certificates.
certcheck.ukas.comThe International Accreditation Forum's global database of accredited certifications.
iafcertsearch.orgISO/IEC 27001 certifies a management system, not a product. To read the claim correctly, here are its limits.
Wording on the certificate“Development, operation, and maintenance and support of the mygate fintech platform.”
The certification runs for three years and is audited externally every year. If requirements are no longer met, the certification body can suspend or withdraw the certificate.
Review of the documentation and of how it is applied in operations.
Initial certification to ISO/IEC 27001:2022.
External check that the ISMS remains effective.
Another external check in the second year.
Full audit before the certificate expires.
Mondo Gate AG is not a bank. Regulated services are provided by supervised partners under their own responsibility.
| Company | Role at mygate |
|---|---|
| Mondo Gate AGHamburg · ISO/IEC 27001 certified | Develops and operates the mygate platform. Acts as e-money agent of PayCenter GmbH for accounts and payment services. |
| PayCenter GmbH | Provides the payment services and issues the Mastercard debit card. |
| Tradevest Markets AGBaFin ID 10115908 | Receives and executes orders for crypto assets, stocks and ETFs under its own regulatory responsibility. Investment firm supervised by BaFin and crypto-asset service provider authorised under MiCAR. |
| Tradevest Digital Assets GmbHBaFin ID 10162132 | Holds and transfers crypto assets for new customers. Supervised by BaFin and authorised under MiCAR. |
| Tangany GmbH | Continues to hold crypto assets for certain existing customers. |
Questions about your account, your card or the app. Real people, by email or phone.
support@mygateapp.deFor vendor assessments, security questionnaires and questions about our ISMS.
info@mondogate.comNever share passwords or confirmation codes with anyone. Only use the contact channels on this page. If in doubt, call support.
+49 (0) 40 573 082 210Yes. Mondo Gate AG, the provider of the mygate app, has been certified to ISO/IEC 27001:2022 since 5 November 2026. The scope covers development, operation, maintenance and support of the mygate platform. The certificate number is TA-01-MGA-051126.
The certificate is hosted by Tempo Audits at tempoaudits.com/certificates/mondogate. It can also be found on UKAS CertCheck and IAF CertSearch by searching for Mondo Gate AG or the certificate number TA-01-MGA-051126.
The certificate is valid until 5 November 2029. Annual surveillance audits take place in the years in between, followed by a recertification audit before expiry.
No. ISO/IEC 27001 confirms an effective information security management system. It is not a product certification and does not protect against price losses. Crypto assets can be highly volatile, and invested capital can be lost entirely.
This page was last updated on 10 November 2026. The current status at the certification body is authoritative.