Skip to content
Envenox
Breach? 24/7+44 20 4525 9100Start a conversation

Certifications

Ours, with certificate numbers

Every mark below carries its issuing body, its stated scope, its certificate number where one is issued, and its expiry date. One standard we do not hold is listed too, with the reason. Our wider posture is on the trust centre.

Held — 6 certifications

  • ISO/IEC 27001:2022 — Information Security Management

    Both pillars
    Certificate no.
    Not stated
    Issuer
    UKAS-accredited certification body
    Scope
    Delivery of cybersecurity and software development services, London and Dhaka.
    Issued
    2026-03-14
    Expires
    2029-03-13

  • ISO 9001:2015 — Quality Management

    Software
    Certificate no.
    Not stated
    Issuer
    UKAS-accredited certification body
    Scope
    Software development delivery.
    Issued
    2025-09-02
    Expires
    2028-09-01

  • SOC 2 Type II — Security, Availability, Confidentiality

    Both pillars
    Certificate no.
    Not stated
    Issuer
    Independent CPA firm
    Scope
    Envenox engagement platform and evidence workspace. Report available under NDA.
    Issued
    2026-06-30
    Expires
    2027-06-29

  • Cyber Essentials Plus — audited technical controls

    Both pillars
    Certificate no.
    Not stated
    Issuer
    IASME, on behalf of the NCSC
    Scope
    Whole organisation.
    Issued
    2026-05-20
    Expires
    2027-05-19

  • CREST member — penetration testing

    Security
    Certificate no.
    Not stated
    Issuer
    CREST International
    Scope
    Penetration testing services.
    Issued
    2024-11-01
    Expires
    2027-10-31

  • PCI QSA — qualified assessor company

    Security
    Certificate no.
    Not stated
    Issuer
    PCI Security Standards Council
    Scope
    PCI DSS 4.0 assessment and advisory.
    Issued
    2026-01-15
    Expires
    2027-01-14

Not held

  • ISO/IEC 27701

    Not held

    Privacy controls are operated under the 27001 ISMS. We have not sought separate 27701 certification and will say so rather than implying it.

Individual credentials across the team

  • 14

    OSCP

  • 6

    CISSP

  • 4

    CREST CRT

  • 3

    OSWE

  • 5

    AWS Solutions Architect

  • 2

    ISO 27001 Lead Auditor

Who holds what

Partners and tiers

  • Amazon Web Services

    Advanced Tier Services Partner

    AWS Advanced Tier Services Partner

  • Microsoft

    Solutions Partner — Security

    Microsoft Solutions Partner, Security

  • Google Cloud

    Partner

    Google Cloud Partner

  • CrowdStrike

    Elevate Partner

    CrowdStrike Elevate Partner

  • Cloudflare

    Services Partner

    Cloudflare Services Partner

  • HashiCorp

    Partner

    HashiCorp Partner

Get started

Book a 60-minute scoping call

A technical conversation with the person who would lead the work — not a qualification script, not a discovery deck. You come away with a written scope, the exclusions stated in the body rather than in an appendix, and a day count that we have not padded.

Start a conversationOur own security posture

A named engineer replies within one business day. Scoping call within three.

  • Claire Benoit

    Practice Director, Governance & Risk

  • Marcus Reid

    Head of Engineering

  • Amara Nwosu

    Chief Operating Officer