# ISO/IEC 27001:2022 certified · Insights · Dscvry

> Our information security management is certified to ISO/IEC 27001:2022, with forward deployed engineering in scope.

Source: https://dscvryai.com/insights/iso-27001/

1. [Home](https://dscvryai.com/)
2. [Insights](https://dscvryai.com/#insights)
3. News

News

# ISO/IEC 27001:2022 certified

Our information security management is certified, with forward deployed engineering in scope.

- **Standard** ISO/IEC 27001:2022
- **Status** Certified
- **Scope** Information security management, with forward deployed engineering in scope
- **Certificates** Available under NDA to customers and prospective customers

ISO/IEC 27001 is the international standard for information security management systems. Our information security management is certified to ISO/IEC 27001:2022, and forward deployed engineering is in scope of that certification.

## What the certification covers

The work we deliver is run under our certified information security management system. That includes forward deployed engineering, which is part of the scope the certificate covers, so that work sits inside the system rather than outside it.

Data handling terms, processing agreements, controls, incident response and audit access are agreed and written into each deployment plan. The certificate shows that our management system meets the standard. The deployment plan shows how the same discipline applies to your data.

If your question is about a particular part of the work, the scope and the deployment plan are the right places to start.

## What it means for you

When you compare suppliers, the certificate and its scope are worth checking first. The certificate tells you that the management system exists and has been assessed against the standard. The scope tells you which of our work it covers, and ours names forward deployed engineering explicitly. The certificate names the standard edition, ISO/IEC 27001:2022, so it is clear which version we are certified to.

You can ask for the evidence directly. Reports and certificates are available under NDA to customers and prospective customers, so you can see them before you decide to work with us.

The certification sits alongside our [SOC 2 Type II report](https://dscvryai.com/insights/soc-2-type-ii/) , and our platform is penetration-tested every year by an independent third party. The [security page](https://dscvryai.com/security/) sets out the rest.

[Security](https://dscvryai.com/security/)

## Bring us the work where wrong is expensive.

Start with the operational problem. We’ll work out the data, models and agents it needs, and where it should run.

[Talk to us →](https://dscvryai.com/contact/?topic=ISO/IEC%2027001:2022%20certified)

## More insights

- [News SOC 2 Type II Independently audited for security, availability and confidentiality.](https://dscvryai.com/insights/soc-2-type-ii/)
- [News DotPlot is now Clarify Ask your enterprise data questions in everyday language, within each person’s access.](https://dscvryai.com/insights/clarify/)
- [News EcoWatch at Selati Game Reserve Automatic species identification from camera-trap images, built to run offline: a proof of concept at Selati Game Reserve.](https://dscvryai.com/insights/ecowatch-selati/)