Stretch Qonnect is now certified
Certified ISO/IEC 27001:2022
We’re pleased to share that Stretch Qonnect has achieved certification to ISO/IEC 27001:2022, the international standard for information security management. Our customers trust us with their data, so we asked an independent auditor to look closely at how we handle that responsibility.
What the certification means
ISO/IEC 27001 doesn’t certify a single product or tool. It certifies how an organization manages information security: how risks are identified, which controls are put in place, and how they are kept up to date. An independent third party has checked that our practices are documented, followed consistently and backed by evidence.
For our customers and partners, it means security at Stretch Qonnect doesn’t rest on good intentions. It rests on a repeatable, audited way of working.
What it covers
The certificate covers the information security management system of the Stretch Qonnect Product Team. In practice, that means it spans how we plan, design, build, test and host our products. It also covers how we sell, support, deploy and integrate them for customers. Our consultancy work on customer data projects sits outside this scope. There, the agreements and security requirements of each engagement continue to apply.
What it looks like in practice
Behind the certificate, we run concrete practices every day, including:
- Secure development and controlled change management
- Role-based access control and multi-factor authentication
- Encryption of data at rest and in transit
- Backup, recovery and incident response plans that we test regularly
- Risk assessment, vendor risk management and security awareness training
For the full list of controls, visit our Trust Center.
Using AI to make security repeatable
The certification raised an important question: how can we show that every change gets the same careful review, every time? Our Product Manager, Elias Ismail, answered it by building AI-assisted security review into our development pipeline. The AI supports our engineers rather than replacing them. On top of that, it leaves a documented record that we reviewed each change. Read the full story here: We were careful. We just weren’t systematic.
Certificate details
- Standard: ISO/IEC 27001:2022
- Certification body: Sancert
- Certificate no.: 202610009
- Valid until: 19 October 2027
- Verify at: sancert.global
Questions about what this means for your organization? Get in touch.
– Michael Faursby-Ahlers, CTO, Stretch Qonnect | Qloud Cover
