{"id":13946,"date":"2026-06-24T19:04:35","date_gmt":"2026-06-24T17:04:35","guid":{"rendered":"https:\/\/actonic.de\/?p=13946"},"modified":"2026-06-24T19:04:42","modified_gmt":"2026-06-24T17:04:42","slug":"iso-27001-certification","status":"publish","type":"post","link":"https:\/\/actonic.de\/en\/iso-27001-certification\/","title":{"rendered":"Actonic Products got ISO\/IEC 27001:2022 Certificate"},"content":{"rendered":"

[vc_row el_id=”iso-hero”][vc_column][vc_column_text]<\/p>\n

\n

Actonic is certified to ISO\/IEC 27001:2022<\/h1>\n

Our information security management system is independently audited and certified to the international ISO\/IEC 27001 standard.<\/p>\n<\/div>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]
\nActonic Products GmbH \u2014 maker of Report Builder<\/a>, the Data Protection and Security Toolkit<\/a>, and Timesheet Builder<\/a> \u2014 is certified to ISO\/IEC 27001:2022. Below is the certificate, its scope, and how it applies to our apps.
\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_id=”iso-certificate”][vc_column][vc_column_text]<\/p>\n

\n
\n
ISO
\n27001<\/div>\n
ISO\/IEC 27001:2022 + A1:2024<\/strong>
\nInformation Security Management System \u2014 Actonic Products GmbH<\/span><\/div>\n<\/div>\n\n\n\n\n\n\n\n\n\n
Certificate holder<\/strong><\/td>\nActonic Products GmbH \u2014 c\/o Seibert Group, Luisenstra\u00dfe 37\u201339, 65185 Wiesbaden, Germany<\/td>\n<\/tr>\n
Standard<\/strong><\/td>\nISO\/IEC 27001:2022 + A1:2024<\/td>\n<\/tr>\n
Certified scope<\/strong><\/td>\nSoftware development<\/td>\n<\/tr>\n
Certificate no.<\/strong><\/td>\n1710DE1184IS<\/td>\n<\/tr>\n
Statement of Applicability<\/strong><\/td>\nVersion dated 5 June 2026<\/td>\n<\/tr>\n
Certified since<\/strong><\/td>\n23 June 2026<\/td>\n<\/tr>\n
Valid until<\/strong><\/td>\n22 June 2029<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
View the certificate on our Trust Portal \u2192<\/a><\/div>\n<\/div>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_id=”iso-meaning”][vc_column][vc_column_text]<\/p>\n

What the certificate means for you<\/h2>\n

ISO\/IEC 27001 is the international standard for information security management. Certification means an accredited body has reviewed how we protect data and operate our systems.<\/p>\n

Audited by an accredited body<\/strong>
\nAn accredited body reviewed our security management system against ISO\/IEC 27001 and re-audits it every year.<\/div>\n
Less work in your vendor review<\/strong>
\nYou can use the certificate to answer many security-questionnaire items up front, instead of assessing us from scratch.<\/div>\n
Covers how the apps are built<\/strong>
\nThe certified scope is our software development \u2014 the process behind Report Builder, the Data Protection and Security Toolkit, and Timesheet Builder.<\/div>\n
\n

About +A1:2024:<\/strong> ISO\/IEC 27001:2022 was amended in 2024 to add climate-related requirements, and our certificate already includes that amendment. The Statement of Applicability \u2014 the list of which controls apply \u2014 is dated 5 June 2026 and available on request.<\/p>\n<\/div>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_id=”iso-scope”][vc_column][vc_column_text]<\/p>\n

What the certificate covers<\/h2>\n

An ISO 27001 certificate’s scope defines what it applies to. Ours is software development: how Actonic builds and maintains its products, which is the work behind the apps you install from the Atlassian Marketplace.<\/p>\n

\n

Certified scope<\/p>\n

Software development<\/h3>\n

Geltungsbereich: Softwareentwicklung<\/p>\n<\/div>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_id=”iso-apps”][vc_column][vc_column_text]<\/p>\n

How this applies to our apps<\/h2>\n

Our Jira and Confluence apps are developed under the certified process, so the certificate applies to how each one is built.
\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column width=”1\/2″][vc_column_text]<\/p>\n

\n

Report Builder \u2192<\/a><\/h4>\n

Custom Jira reports, charts, and dashboards.<\/p>\n<\/div>\n

[\/vc_column_text][\/vc_column][vc_column width=”1\/2″][vc_column_text]<\/p>\n

\n

Data Protection & Security Toolkit for Jira \u2192<\/a><\/h4>\n

PII discovery and anonymization for Jira.<\/p>\n<\/div>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column width=”1\/2″][vc_column_text]<\/p>\n

\n

Data Protection & Security Toolkit for Confluence \u2192<\/a><\/h4>\n

PII discovery and redaction for Confluence.<\/p>\n<\/div>\n

[\/vc_column_text][\/vc_column][vc_column width=”1\/2″][vc_column_text]<\/p>\n

\n

Timesheet Builder \u2192<\/a><\/h4>\n

Privacy-aware time tracking for Jira.<\/p>\n<\/div>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_id=”iso-beyond”][vc_column][vc_column_text]<\/p>\n

Beyond the certificate<\/h2>\n

ISO 27001 is one part of how we protect customer data. Alongside it:<\/p>\n