Kymatio achieves ISO 27001 certification, strengthening security assurance for customers and partners

ISO/IEC 27001:2022 certification complements Kymatio’s ENS Medium certification and inclusion in the Spanish National Cryptologic Centre’s CPSTIC catalogue, providing complementary evidence for organisations assessing Kymatio as a technology provider.

Human Affinity Platform, S.L., the company behind Kymatio®, has achieved ISO/IEC 27001:2022 certification for the Information Security Management System supporting the development, maintenance and support services for Kymatio HRM.

This milestone reflects the company’s commitment to strengthening the practices and controls that underpin its platform.

A risk-based approach and continual improvement

ISO/IEC 27001:2022 is an international standard that sets out the requirements for establishing, maintaining and improving an Information Security Management System.

Certification confirms that the management system within its scope meets these requirements, with an approach focused on identifying and treating risks and continually reviewing the measures in place.

Helping organisations manage human risk also requires rigorous security management across the processes that underpin our platform.

What this means for customers and partners

Certification provides verifiable evidence to help customers and partners assess Kymatio’s information security management within the certified scope.

Its international recognition supports the provision of documentation for supplier assessments, security questionnaires and requests for proposals. This is particularly relevant to enterprise customers, international organisations and partners that need to assess how their technology providers manage information.

It also validates a framework based on defined responsibilities, risk treatment and continual improvement.

ISO 27001, ENS and CPSTIC: complementary assurance

The new certification joins Kymatio’s existing credentials, each with a specific scope:

• ISO/IEC 27001:2022: certifies the Information Security Management System supporting the development, maintenance and support of Kymatio HRM.
• ENS Medium category: certifies the conformity of the information system supporting these activities with Spain’s National Security Framework.
• Inclusion in the Spanish National Cryptologic Centre’s CPSTIC catalogue: recognises Kymatio’s qualification in the Training and Awareness family, as a service for use in ENS High-category systems.

Together, these provide evidence across three complementary areas: the management system, the conformity of the information system and the qualification of the service. This combination helps customers and partners assess Kymatio against their procurement requirements.

At Kymatio, we help organisations manage human risk. And we believe that responsibility also starts with how we manage our own security.

Learn about our commitment to security and compliance.