Every booking you send us carries sensitive information: passport numbers, travel dates, sometimes payment details. Your clients hand that information to you, and you hand it to us. That chain is only as strong as its weakest link.
We’ve spent the past year making sure that link is solid. Trails of Indochina has now completed an independent security audit by Viettel Cyber Security, and adapted our information security practices to align with ISO 27001:2022, the international benchmark for managing information security.
Viettel Cyber Security is a specialist information security arm of Viettel Group, Vietnam’s largest telecommunications company, with over a decade of experience running cybersecurity operations for governments, large enterprises and telecoms clients across the region. Its team holds internationally recognised credentials, including CISSP, OSCP and CEH, and the company itself is ISO 27001 certified, along with CREST and PCI DSS accreditations. This isn’t a small local consultancy issuing a rubber stamp. It’s a well-established, technically credentialed auditor whose day-to-day work is running security operations centres and penetration testing for organisations that cannot afford to get this wrong.
Passport copies and booking records are now classified by sensitivity and restricted to the staff who need them to do their job. A junior team member coordinating hotel logistics no longer has open access to a traveller’s passport scan.
No security system is unbreakable, so we’ve documented exactly how we identify risks and notify affected parties if an incident occurs. That means a faster, clearer response, not a scramble.
The audit isn’t a certificate we file away. Controls are reviewed on an ongoing basis, so our practices keep pace with new risks rather than lagging behind them.
When a client books through you, and you book through us, their passport details and personal information move through a system that’s been independently tested by a credentialed, established security firm and measured against a recognised international standard, not just one we’ve assessed ourselves.
For you, that’s a concrete answer the next time a client asks how their data is protected. For their clients, it’s fewer people handling their information, clearer accountability if something goes wrong, and a partner that treats data protection as a standing responsibility rather than a box to tick.
The audit was conducted by Viettel Cyber Security in 2026.
If you have any further questions about our cyber security and data privacy processes, please contact us on hello@trailsofindochina.com.Â
Inspired to start planning your customised journey to Southeast Asia? Share your ideas with us at hello@trailsofindochina.com or submit a request below.
