ISO/IEC 27001:2022 certified

Security Information

Devlane holds ISO/IEC 27001:2022 certification, the international standard for information security management systems.

Verify on BSITalk to our team
Certificate number
IS 839651
Certification body
BSI Assurance UK Limited
Accreditation
ANAB, member of the International Accreditation Forum
Expiry date
January 23, 2029
About the certification

The certification covers the information security management system applied to the information systems that support information processing, storage and transmission as part of the provision of software development team extension services, in accordance with the Statement of Applicability.

This certificate is traceable to the original registration certificate SI-0013/2023, issued by AENOR on July 15, 2025. The recertification audit was completed on January 26, 2026.

What ISO/IEC 27001:2022 means

ISO/IEC 27001 is the international standard for information security management systems. It defines requirements for establishing, implementing, maintaining and continually improving how an organization manages information security risks.

The 2022 revision updated the control set to reflect current threats, including cloud services, threat intelligence and data protection. Certification requires an independent audit by an accredited certification body, followed by annual surveillance audits and full recertification every three years.

How this applies to client engagements

The certified scope covers the systems supporting software development team extension services. In practice, this means the processes for handling client information during recruitment, onboarding, device provisioning and ongoing team operations are governed by an audited information security management system.

For engagements in regulated industries, Devlane works with teams experienced in HIPAA, GDPR and SOC 2 requirements. Specific compliance obligations are defined per engagement.

Security practices
Device management
All company devices are centrally managed with mobile device management, endpoint protection and disk encryption.
Access control
Access to client systems and data follows least privilege principles, with periodic review and revocation on offboarding.
Data handling
Information processing, storage and transmission follow documented procedures covered by the certified management system.
Incident response
Documented procedures for detection, response and notification, with defined escalation paths.
Continuous improvement
Annual surveillance audits by BSI, internal audits and management review as required by the standard.
Certificate details
FieldDetail
StandardISO/IEC 27001:2022
Certificate numberIS 839651
Certification bodyBSI Assurance UK Limited
AccreditationANAB, member of the International Accreditation Forum
Certified legal entityBrimak Corporation S.A
Registered addressLuis Alberto de Herrera 1248, Torre 2, Piso 15, Montevideo, Uruguay
Original registration dateDecember 16, 2025
Effective dateJanuary 26, 2026
Expiry dateJanuary 23, 2029
VerificationBSI Client Directory
FAQs

Frequently Asked Questions

Is Devlane ISO 27001 certified?+
Yes. Devlane holds ISO/IEC 27001:2022 certification, certificate number IS 839651, issued by BSI Assurance UK Limited under ANAB accreditation. The certification is valid through January 23, 2029.
Which certification body issued the certificate?+
BSI Assurance UK Limited, part of the BSI Group. The certification is accredited by ANAB, a member of the International Accreditation Forum, which means it is recognized internationally.
How can I verify the certificate?+
The certificate can be verified independently in the BSI Client Directory. Search for certificate number IS 839651 or for the legal entity name, Brimak Corporation S.A.
Why is the certificate issued to Brimak Corporation S.A?+
Brimak Corporation S.A is the legal entity under which Devlane operates. Devlane is the commercial brand. Both refer to the same organization, registered in Montevideo, Uruguay.
What does the certification cover?+
The certified scope is the information security management system applied to the information systems that support information processing, storage and transmission as part of the provision of software development team extension services.
When was the certification obtained?+
The original registration date is December 16, 2025. The current certificate became effective on January 26, 2026, following a recertification audit completed on the same date. It is traceable to the original registration certificate SI-0013/2023.

Your growth, powered by our talent.

hello@devlane.com
Contact Us