Our Certifications

ISO 14001
As part of the strengthened CSR (Corporate Social Responsibility) policy of Waysis and TMC, we operate according to a certified environmental management system in accordance with ISO 14001:2015. This certification provides insight into the environmental impact of our business processes and supports us in managing and reducing our ecological footprint. In this way, we provide a structural framework for our responsibility to limit environmental impact and continuously improve our business operations.

ISO 9001
Quality in products and services requires structurally anchored business processes. TMC therefore operates according to a certified quality management system in accordance with ISO 9001:2015. This system is based on our years of experience and supports a consistent and manageable execution of our activities. The effectiveness of the quality management system is monitored through internal audits and annual external audits by an independent certification body. This ensures continuous improvement and the reliable quality of our products and services.

ISO 27001, ISO 27017 en ISO 27018
Protecting business information, systems, and personal data requires structural and demonstrable control measures. Within the Waysis Group, of which TMC is a part, we therefore operate according to a certified information security management system in accordance with ISO 27001:2022, supplemented by ISO 27107:2015 and ISO 27018:2019.
The information security management system is implemented organization-wide and is based on our business processes and years of experience. Its operation is monitored through internal audits and annual external audits by an independent certification body. In this way, we guarantee the confidentiality, integrity, and availability of information for customers, partners, and employees.
- ISO 27017 provides additional guidelines for information security when using and providing cloud services.
- ISO 27018 focuses specifically on the protection of Personally Identifiable Information (PII) in cloud environments, with an emphasis on privacy and transparency.
VCA Certification
Safe working practices are central to Waysis and TMC. This concerns the safety and health of employees, the safety of bystanders in public spaces, and the careful management of environmental aspects during the execution of work. To structurally safeguard these aspects, Waysis is certified according to VCA 2008/5.1**.
We expect our employees to hold personal VCA certification. We also require this safety standard from subcontractors performing work on behalf of Waysis companies. This ensures a safe and responsible execution of our projects.

ISAE 3402 Reporting
Waysis performs various critical processes for municipalities and organizations, such as processing parking transactions and data related to traffic violations. For these services, we maintain an ISAE 3402 Type II report, the international standard for the management of outsourced processes.
With this report, we demonstrate that our processes are demonstrably and structurally designed and controlled. This allows us to meet the contractual requirements necessary to take over (financial) services for municipalities, including those related to parking terminals. Our IT systems are hosted in professional data centers that meet strict requirements for physical and digital security, in accordance with applicable information security standards.
Payment Terminal Certification
Every payment terminal deployed in the Netherlands for electronic payments must meet strict security requirements. These requirements are based on international standards such as PCI DSS (Payment Card Industry Data Security Standard) and EMV, which safeguard the security of payment transactions and protection against fraud. Additionally, payment terminals are audited according to the national Regeling Certificering Betaalautomaten (Payment Terminal Certification Regulation), as established by the Dutch Payments Association (Betaalvereniging Nederland).
The card readers in TMC's parking terminals are approved for use in the Netherlands and comply with all applicable certification requirements. This guarantees secure, reliable, and compliant payment transactions in accordance with the current standards of the Dutch payment sector.
Dutch Payments Association (Betaalvereniging Nederland)
Acceptant Payment Service Provider (APSP)
TMC is certified by the Dutch Payments Association as an Acceptant Payment Service Provider (APSP). This means we are authorized to handle the entire electronic payment process and the associated cash flows. In this role, TMC acts as the link between the merchant (the payment terminal in the parking meter) and the acquirer (the municipality's bank). This relieves the municipality of the administrative burden, as it is no longer necessary to conclude a separate contract with the bank for every individual payment terminal.