SECURITY AND COMPLIANCE

A platform built for organizations with high security requirements

Kymatio integrates security and compliance into the design and operation of its Human Risk Management platform. This page gathers our certifications and accreditations so partners, customers and public-sector buyers can verify them directly.

ENS (Spanish National Security Framework) conformity certification, MEDIUM category
Certified

ENS · MEDIUM category

Certifies that the information system supporting the development, maintenance and support of Kymatio HRM meets the security measures of the Spanish National Security Framework (Royal Decree 311/2022) at MEDIUM category, across all five security dimensions.

Scope
Development, maintenance and support services of Kymatio HRM, delivered from Madrid, with information hosted on AWS
Issued by
ACCM, accredited by ENAC
Certificate
ENS_2.026.200 · Valid until 17 September 2028
CPSTIC catalogue of ICT security products and services, National Cryptologic Centre (CCN)
Qualified product

CPSTIC · CCN

Qualified in Training and Awareness for ENS systems of HIGH category

Kymatio is included in the Catalogue of ICT Security Products and Services (CPSTIC) of the Spanish National Cryptologic Centre (CCN), the reference for Spanish public administrations and organisations that must comply with the ENS. Inclusion means Kymatio has passed the CCN's evaluation.

Scope
Training and Awareness · ENS systems of HIGH category
Issued by
National Cryptologic Centre (CCN)
Status
Inclusion recently renewed
ISO/IEC 27001:2022 information security management certification, issued by ACCM
Certified

ISO/IEC 27001:2022

Certifies Kymatio's Information Security Management System (ISMS): an independent body has verified that we identify and manage information security risks through a systematic, continuously improving management system. The certification applies to how we manage security as an organisation, not to the product on its own.

Scope
ISMS covering the development, maintenance and support services of Kymatio HRM, delivered from C/ Fuencarral 135, Madrid
Issued by
ACCM
Certificate
SI-467226 · Valid until 20 October 2029

Frameworks we help you address

Our own certifications are different from the frameworks our platform helps customers comply with. Kymatio HRM supports the awareness, training and human-risk requirements of NIS2, DORA, ENS, ISO/IEC 27001 and NIST, among others. The full list is available on our Regulatory Compliance page.

Individual certifications

Leading by example

Beyond our corporate certifications, members of our team hold individual professional certifications: Fernando Mateus holds the CCSP and César González the CISSP.

Fernando Mateus
Fernando Mateus
Chief Executive Officer
CCSP

Certified Cyber Security Professional (CCSP), issued by ISMS Forum (Asociación Española para el Fomento de la Seguridad de la Información). The certification accredits professional specialisation in information security, covering risk management, security governance, compliance and cyber security.

Verified on Credly →
César González Lobo
César González Lobo
Chief Product & Security Officer
CISSP

Certified Information Systems Security Professional (CISSP), issued by ISC2. The leading global certification for the design, implementation and management of information security programmes.

About the CISSP at ISC2 →