Security Information

Devlane holds ISO/IEC 27001:2022 certification, the international standard for information security management systems. The certificate, number IS 839651, was issued by BSI Assurance UK Limited under ANAB accreditation and is valid through January 2029.

The certification covers the information security management system applied to the information systems that support information processing, storage and transmission as part of the provision of software development team extension services, in accordance with the Statement of Applicability.

This certificate is traceable to the original registration certificate SI-0013/2023, issued by AENOR on July 15, 2025. The recertification audit was completed on January 26, 2026.

Devlane operates under the legal entity Brimak Corporation S.A. When verifying the certificate in the BSI Client Directory, search for the legal entity name or the certificate number.

What ISO/IEC 27001:2022 means

ISO/IEC 27001 is the international standard for information security management systems. It defines requirements for establishing, implementing, maintaining and continually improving how an organization manages information security risks.

The 2022 revision updated the control set to reflect current threats, including cloud services, threat intelligence and data protection. Certification requires an independent audit by an accredited certification body, followed by annual surveillance audits and full recertification every three years.

How this applies to client engagements

The certified scope covers the systems supporting software development team extension services. In practice, this means the processes for handling client information during recruitment, onboarding, device provisioning and ongoing team operations are governed by an audited information security management system.

For engagements in regulated industries, Devlane works with teams experienced in HIPAA, GDPR and SOC 2 requirements. Specific compliance obligations are defined per engagement.

Security practices

  • Device management: all company devices are centrally managed with mobile device management, endpoint protection and disk encryption.
  • Access control: access to client systems and data follows least privilege principles, with periodic review and revocation on offboarding.
  • Data handling: information processing, storage and transmission follow documented procedures covered by the certified management system.
  • Incident response: documented procedures for detection, response and notification, with defined escalation paths.
  • Continuous improvement: annual surveillance audits by BSI, internal audits and management review as required by the standard.
  • Field Detail
    Standard ISO/IEC 27001:2022
    Certificate number IS 839651
    Certification body BSI Assurance UK Limited
    Accreditation ANAB, member of the International Accreditation Forum
    Certified legal entity Brimak Corporation S.A
    Registered address Luis Alberto de Herrera 1248, Torre 2, Piso 15, Montevideo, Uruguay
    Original registration date December 16, 2025
    Effective date January 26, 2026
    Expiry date January 23, 2029
    Verification BSI Client Directory

    Frequently Asked Questions

    Is Devlane ISO 27001 certified?

    Yes. Devlane holds ISO/IEC 27001:2022 certification, certificate number IS 839651, issued by BSI Assurance UK Limited under ANAB accreditation. The certification is valid through January 23, 2029.

    Which certification body issued the certificate?

    BSI Assurance UK Limited, part of the BSI Group. The certification is accredited by ANAB, a member of the International Accreditation Forum, which means it is recognized internationally.

    How can I verify the certificate?

    The certificate can be verified independently in the BSI Client Directory at bsigroup.com/ClientDirectory. Search for certificate number IS 839651 or for the legal entity name, Brimak Corporation S.A.

    Why is the certificate issued to Brimak Corporation S.A?

    Brimak Corporation S.A is the legal entity under which Devlane operates. Devlane is the commercial brand. Both refer to the same organization, registered in Montevideo, Uruguay.

    What does the certification cover?

    The certified scope is the information security management system applied to the information systems that support information processing, storage and transmission as part of the provision of software development team extension services.

    When was the certification obtained?

    The original registration date is December 16, 2025. The current certificate became effective on January 26, 2026, following a recertification audit completed on the same date. It is traceable to the original registration certificate SI-0013/2023.

    Your growth, powered by our talent.