Scripttic Achieves ISO 27001:2022 Information Security Certification

Information security has always been a priority at Scripttic, but for a long time our practices lived in people's heads, in shared documents, and in unwritten conventions. ISO 27001:2022 gave us the framework to formalise all of that — and completing the certification process proved that what we were already doing was, by and large, the right thing.

What the certification means

ISO 27001:2022 is the international standard for information security management systems (ISMS). It covers everything from access controls and incident response to supplier relationships and risk assessment. Achieving certification means an independent auditor has verified that our processes meet those requirements — not just on paper, but in practice.

For our clients, it means any sensitive data handled during a project — credentials, architecture details, business logic, personal data — is managed within a certified, auditable security framework.

How we got there

The process started with a gap analysis against the standard's 93 controls. Some we already had in place. Others required new documentation, new tooling, or changes to how we onboard and offboard team members. The work touched every part of the company: engineering, operations, HR, and management.

We published our Information Security Management System policy and made it accessible to the whole team. The policy is a living document — it gets reviewed and updated as our processes evolve and as the threat landscape changes.

What's next

Certification is not the end of the process — it's the beginning of a continuous improvement cycle. We will undergo surveillance audits annually and a full recertification every three years. That rhythm suits us: we are not interested in a certificate on the wall; we are interested in the discipline it represents.

A big thank you to the whole Scripttic team for the effort and cooperation that made this milestone possible. We are growing, and we are building the right foundations to grow responsibly.