ISO/IEC 27001:2022 certified
Our information security management is certified, with forward deployed engineering in scope.
- Standard
- ISO/IEC 27001:2022
- Status
- Certified
- Scope
- Information security management, with forward deployed engineering in scope
- Certificates
- Available under NDA to customers and prospective customers
ISO/IEC 27001 is the international standard for information security management systems. Our information security management is certified to ISO/IEC 27001:2022, and forward deployed engineering is in scope of that certification.
What the certification covers
The work we deliver is run under our certified information security management system. That includes forward deployed engineering, which is part of the scope the certificate covers, so that work sits inside the system rather than outside it.
Data handling terms, processing agreements, controls, incident response and audit access are agreed and written into each deployment plan. The certificate shows that our management system meets the standard. The deployment plan shows how the same discipline applies to your data.
If your question is about a particular part of the work, the scope and the deployment plan are the right places to start.
What it means for you
When you compare suppliers, the certificate and its scope are worth checking first. The certificate tells you that the management system exists and has been assessed against the standard. The scope tells you which of our work it covers, and ours names forward deployed engineering explicitly. The certificate names the standard edition, ISO/IEC 27001:2022, so it is clear which version we are certified to.
You can ask for the evidence directly. Reports and certificates are available under NDA to customers and prospective customers, so you can see them before you decide to work with us.
The certification sits alongside our SOC 2 Type II report, and our platform is penetration-tested every year by an independent third party. The security page sets out the rest.