A platform built for organizations with high security requirements
Kymatio integrates security and compliance into the design and operation of its Human Risk Management platform. This page gathers our certifications and accreditations so partners, customers and public-sector buyers can verify them directly.
ENS certification — MEDIUM category
The information system that supports the development, maintenance and support services of the Kymatio HRM platform is certified under the Spanish National Security Framework (Esquema Nacional de Seguridad, ENS), Royal Decree 311/2022, at MEDIUM category. All five security dimensions (confidentiality, integrity, availability, authenticity and traceability) are rated at MEDIUM level.
Scope of the certification
Information system supporting the development, maintenance and support services of the KYMATIO HRM platform. Services are delivered from Kymatio's registered office in Madrid, with information hosted on AWS cloud services.
Certificate details
- Certificate number: ENS_2.026.200
- Certification body: ACCM (Agencia para la Certificación de la Calidad y el Medio Ambiente), accredited by ENAC
- Certified entity: Human Affinity Platform, S.L. (Kymatio)
- Initial certification: 16 September 2026
- Date of issue: 17 September 2026
- Valid until: 17 September 2028
The official certificate issued by ACCM can be downloaded from the ENS card on this page.
CPSTIC — National Cryptologic Centre (CCN)
Kymatio is included in the Catalogue of ICT Security Products and Services (CPSTIC) of the Spanish National Cryptologic Centre (CCN). The CPSTIC lists the security products and services whose use is recommended for Spanish public administrations and for organisations regulated by the ENS. Kymatio's entry can be consulted from the CPSTIC card on this page.
Kymatio has recently renewed its inclusion in the catalogue. Read the announcement.
What these accreditations mean
The ENS (Esquema Nacional de Seguridad) is the mandatory security framework for Spanish public-sector information systems and their suppliers. An independent, ENAC-accredited body audits the system against the measures required for its category; MEDIUM category applies to systems handling information whose compromise would cause a significant impact.
The CPSTIC is maintained by the CCN. Inclusion means Kymatio has passed the CCN's evaluation and is a referenced product for public administrations and for organisations that must comply with the ENS.
Frameworks we help you address
Our own certifications are different from the frameworks our platform helps customers comply with. Kymatio HRM supports the awareness, training and human-risk requirements of NIS2, DORA, ENS, ISO/IEC 27001 and NIST, among others. The full list is available on our Regulatory Compliance page.
Leading by example
Our commitment to security is also reflected in the preparation of our team: Fernando Mateus holds the CCSP certification and César González the CISSP.
Certified Cyber Security Professional (CCSP), issued by ISMS Forum. The certification accredits professional specialisation in information security, covering risk management, security governance, compliance and cyber security.
Certified Information Systems Security Professional (CISSP), issued by ISC2. The leading global certification for the design, implementation and management of information security programmes.
Join the Kymatio® newsletter and get the latest insights, research, and practical tips on cybersecurity awareness prevention straight to your inbox.
