ISO 27001

Independently certified for information security since 2023

Organisations trust Pilat with sensitive employee information, including performance assessments, talent data and salary information. Our ISO 27001 certification provides independent assurance that we manage information security in accordance with an internationally recognised standard.

In September 2026, we successfully completed our recertification audit with the British Assessment Bureau. Our information security management system (ISMS) was assessed against ISO/IEC 27001:2022, renewing our certification for a further three years. Annual surveillance audits provide ongoing independent assessment of our information security management practices.

Standard: ISO/IEC 27001:2022
Certification body: British Assessment Bureau (UKAS accredited)
Certificate number: 247972
Scope: The provision of HR/HCM software services encompassing Performance and Talent Management, Job Evaluation and 360 Degree Feedback globally.
First certified: 29 September 2023
Current certificate issued: 28 September 2026
Valid until: 28 September 2029

What ISO 27001 means for you

Independently verified security
Our information security policies, processes and controls are independently assessed by a UKAS-accredited certification body against an internationally recognised standard.

Risks managed, not just documented
We regularly identify and assess information security risks, managing them through controls including access management, encryption, secure development practices and supplier assessments.

Support for your own compliance
Our certified ISMS supports our legal and contractual obligations for protecting personal data, including those under UK GDPR. It also provides evidence to support your own supplier assessments and due diligence processes.

Continuous improvement
Certification isn’t a one-off. We review our security regularly, carry out internal audits and management reviews, and adapt to new threats. External auditors check our progress every year.

Need more detail for your security review?

Our team can provide supporting information for supplier due diligence and security questionnaires.