Audit & Certification
Services.

Certification of quality management systems for organisations of any size and sector. Demonstrates consistent delivery of products and services that meet customer and regulatory requirements.

Certification of information security management systems. Verifies that organisations systematically manage risks to the confidentiality, integrity, and availability of information.

Comprehensive assessment of compliance with the EU General Data Protection Regulation — processing lawfulness, data subject rights, DPIAs, transfer mechanisms, and breach procedures.

Assessment against the UAE Personal Data Protection Law — data processing principles, cross-border transfers, controller obligations, and data subject consent mechanisms.

Compliance audit against Brazil's Lei Geral de Proteção de Dados — legal bases, data protection officer, international transfers, and ANPD requirements.

Assessment against Canada's Personal Information Protection and Electronic Documents Act — fair information principles, consent, and accountability requirements.

Independent assessment of compliance with HIPAA Privacy, Security, and Breach Notification Rules — administrative, physical, and technical safeguards for PHI.

Gap assessment against HITRUST Common Security Framework (CSF) — identifying readiness gaps before formal HITRUST assessment for healthcare and life sciences.

Gap assessment against SOC 2 Trust Service Criteria — Security, Availability, Processing Integrity, Confidentiality, and Privacy. Prepares organisations for formal SOC 2 examination.

Assessment and certification under the UK Government-backed Cyber Essentials and Cyber Essentials Plus schemes — the baseline for UK public sector supply chains.

Independent audit of cyber security controls aligned with UK national standards and NCSC guidance — for organisations requiring UK-specific assurance beyond Cyber Essentials.

Conformity assessment for high-risk AI systems — risk classification, technical documentation review, data governance, human oversight, and transparency requirements under the European AI Act.

Assessment of cyber security risk management measures and incident reporting obligations under the EU NIS2 Directive for essential and important entities.

Digital Operational Resilience Act — audit of ICT risk management frameworks, incident reporting, digital operational resilience testing, and third-party risk management for financial entities.