Corum Digital Achieves SOC 2 Type II Security Certification as the Digital Signage Industry Faces Growing Cyber Threats

Vaughan, Ontario

Corum Digital Corporation, parent company of the MediaTile and firmChannel digital signage platforms, has achieved SOC 2 Type II certification with no exceptions, becoming one of a small number of Canadian digital signage providers to earn the designation. The company also completed a clean third-party penetration test, providing additional independent validation of its security posture.

SOC 2, which stands for System and Organization Controls 2, is an auditing framework developed by the American Institute of Certified Public Accountants (AICPA). A Type II audit goes beyond point-in-time assessments by examining whether an organization's security controls have been consistently maintained and operating effectively over months of continuous operation. The audit was conducted by SAV Associates, a licensed CPA firm.

"We made the decision more than a year ago that our customers deserve independently verified security, not just marketing claims," said Amedeo Tarzia, President and CEO of Corum Digital. "In healthcare, financial services, government, and education, the organizations we serve can't afford to take their technology vendors at their word. This certification is the evidence."

An Industry Under Pressure

The certification arrives at a time when the digital signage industry is contending with serious and visible security failures.

In April 2025, hackers exploited a third-party digital signage provider's systems and took control of menu board displays at roughly 300 Canadian restaurant locations simultaneously, forcing the chain to take all screens offline while it worked to regain control. The breach affected both indoor and drive-thru displays across every location on the network.

A January 2025 study by the Hong Kong Computer Emergency Response Team (HKCERT) tested eight digital signage brands and identified 20 security vulnerabilities, 10 of them classified as high-risk. Researchers demonstrated they could gain control of a signage device in under three seconds. The vulnerabilities included weak encryption, inadequate authentication, and exposed management interfaces.

These incidents reflect a broader pattern. The 2025 Verizon Data Breach Investigations Report, which analyzed more than 22,000 security incidents globally, found that 30% of confirmed data breaches involved third-party vendors. That figure doubled from 15% in the previous year's report. For organizations that rely on third-party technology platforms connected to their networks, vendor security has become a front-line concern.

"Digital signage platforms connect to corporate networks, integrate with business data, and operate in public-facing environments," said Wess Bechard, Chief Technology Officer at Corum Digital. "The incidents across our industry this year have shown what happens when security isn't treated as a core engineering requirement. We built our platform around that principle from the start."

What the Audit Examined

The SOC 2 Type II audit examined Corum Digital's controls across access management, network security, data protection, vulnerability management, change management, incident response, and organizational governance. The observation period covered months of continuous operations, with the auditor sampling evidence throughout to verify that documented controls were functioning as designed.

The certification covers both the MediaTile and firmChannel platforms, including the cloud infrastructure that hosts each CMS, user authentication and access controls, data storage and transmission, the software development and change management process, and employee security practices spanning hiring, training, and access revocation.

Recognition Backed by Verification

The SOC 2 Type II certification builds on Corum Digital's recognition by Frost & Sullivan in the 2025 Frost Radar: Digital Signage Solutions report. Frost & Sullivan evaluated digital signage providers globally and recognized Corum Digital as the most innovative digital signage company in Canada. Both MediaTile and firmChannel ranked among the top three platforms globally for innovation.

"Enterprise customers should be able to expect both from their signage provider: a platform that pushes the technology forward and one that can prove its security practices hold up under independent scrutiny," said Tarzia. "If your digital signage provider can't show you an independently verified security report, it's worth asking why."

A Company-Wide Effort

Achieving SOC 2 Type II required more than a year of preparation across every department at Corum Digital. The audit scope extends beyond software development and network infrastructure into business operations, HR processes, and administrative controls, reflecting the reality that security weaknesses in any part of an organization can create risk for customers.

"SOC 2 touches every corner of a company, from how we write code to how we onboard employees to how we handle access when someone leaves," said Tarzia. "I'm grateful to every team at Corum Digital for the work they put into this. It was a significant commitment, and the clean report reflects that."

Report Availability

The SOC 2 Type II report is available upon request to customers and prospective customers under NDA. For more information, visit www.corumdigital.com or contact security@corumdigital.com.

About Corum Digital

Corum Digital Corporation is a Canadian technology company specializing in cloud-based digital signage solutions. Through its MediaTile (www.mediatile.com) and firmChannel (www.firmchannel.com) platforms, the company serves organizations across healthcare, financial services, education, government, retail, and corporate environments throughout North America and globally. Corum Digital was recognized by Frost & Sullivan in 2025 as Canada's most innovative digital signage company, with both platforms ranking among the top three globally in the Frost Radar: Digital Signage Solutions report.

SOURCE Corum Digital Corporation

Media Contact: Albert Rose, Media Relations, Email: pr@corumdigital.com, Phone: +1 (416) 342-0609