Smart Communications gains CSA STAR Level 2 in Singapore

Smart Communications has received CSA STAR Level 2 certification for its SmartCOMM and SmartIQ products hosted on Amazon Web Services infrastructure in Singapore. The certification provides independent assurance of the company's cloud security controls for customers in Singapore and across ASEAN.

CSA STAR (Security, Trust, Assurance and Risk) is a cloud security assurance programme developed by the Cloud Security Alliance. STAR Level 2 requires an independent third-party audit to assess security controls, governance, and cloud security maturity.

Smart Communications markets SmartCOMM as a customer communications management product and SmartIQ as a data capture and processing product. Both offerings run on AWS in Singapore to support customers with local hosting and cloud governance requirements.

The certification comes as Singapore businesses face greater scrutiny over data handling and service resilience. Organisations in financial services, insurance, and the public sector operate under strict regulatory expectations and often require evidence that suppliers maintain formal security management practices.

Smart Communications also pointed to consumer expectations shaping corporate security priorities. Company benchmark research found that 90% of Singapore consumers consider robust data security measures essential to trusting the companies they deal with.

Audit standard

STAR Level 2 sits within a broader CSA framework that enables cloud providers and cloud service users to compare security practices. Level 1 is based on a self-assessment, while Level 2 is based on an external audit and attestation. For large organisations that require third-party validation during vendor onboarding, this can help shorten procurement reviews.

The audit confirms that Smart Communications' security practices are documented and assessed against a standard that emphasises transparency and risk management. The company positioned the result as part of a broader push to strengthen "digital trust" in the region.

Heidi Johnson, Chief Product and Technology Officer at Smart Communications, said the certification reflects how security expectations are shaping customer engagement strategies in Singapore.

"Trust is the foundation of every meaningful customer conversation, particularly in markets like Singapore where expectations around security, compliance, and digital experiences are exceptionally high," said Heidi Johnson, Chief Product and Technology Officer at Smart Communications.

"This achievement reflects our commitment to helping organisations innovate with confidence and deliver cloud-first, data-driven customer interactions grounded in security and trust," Johnson said.

Singapore footprint

The CSA STAR certification follows the launch of a Smart Communications data centre in Singapore, positioned around data residency and regulated-sector requirements. Local data centre capacity can matter for organisations managing sensitive information and restrictions on cross-border transfers.

Government agencies, banks, and insurers are among the regulated organisations that often look for in-country hosting options. They also tend to use detailed security questionnaires and require evidence of formal controls during procurement.

Smart Communications also referenced other security frameworks in its approach, saying its local infrastructure aligns with globally recognised standards including ISO 27001 and SOC 2. These frameworks are commonly used as baseline indicators for security governance and operational controls, particularly in supplier risk assessments.

For vendors selling communications and data capture tools into regulated industries, certifications can be a commercial differentiator. They can also influence hosting decisions, as buyers look for regional infrastructure and attested controls that match internal risk policies.

Product context

Smart Communications sells software for customer communications, digital forms, and workflow-driven interactions. It targets highly regulated organisations that manage complex processes and large volumes of customer communications.

The company describes its broader platform as Conversation Cloud, with features including omnichannel communications, orchestration, secure data capture, and digital archival.

Smart Communications has more than 700 enterprise customers worldwide, including Zurich Insurance, Priority Health, The Pacific Financial Group, and The Bancorp. It also integrates with enterprise systems including Salesforce, AWS, Guidewire, DuckCreek, OneSpan, and Pega, and supports more than 60 billion customer conversations each year.

The Singapore certification and local hosting focus come as many organisations reassess where customer interaction systems run and how data moves across systems. Procurement teams increasingly ask for independent assurance reports, clearer governance documentation, and evidence of operational testing.

Smart Communications said its Singapore-based AWS hosting and CSA STAR Level 2 certification position it for customers planning new digital communications programmes in the region, as security audits and compliance checks increase with adoption.