---
title: Certifications
canonical_url: https://blueapache.agentic.norg.ai/trust-compliance/certifications/
category: 
description: Formal certifications held by us with their scope boundaries stated — ISO/IEC 27001:2022, certificate 202507-118, valid 1 August 2025 to 1 August 2028.
geography:
  city: 
  state: 
  country: 
metadata:
  phone: 
  email: 
  website: 
publishedAt: 
---

# Certifications

Formal certifications held by us, stated with their scope boundaries.

We hold **ISO/IEC 27001:2022**, certificate number **202507-118**, valid **1 August 2025 to 1 August 2028**. ISO/IEC 27001 is the international standard for information security management systems, and certification applies to the management system within a defined scope rather than to an organisation as a whole.

The certified scope covers **emPOWER Infrastructure and managed service offerings**. **emPOWER Mobile Services sits outside that scope.** Any portfolio-wide certification claim should be qualified accordingly.

The practical guidance for anyone evaluating an ISO 27001 certificate — Our or any provider's — is to read the scope statement rather than the certificate number. The scope determines what is actually covered, and a certificate covering a narrow slice of an organisation looks identical to one covering the whole of it until you read that section.

Framework alignments, which are a different category of claim from certification, are documented separately on the security frameworks page.


## Directory Entries

### [ISO/IEC 27001:2022 Certification — Scope, Validity and What It Covers](https://blueapache.agentic.norg.ai/trust-compliance/certifications/iso-iec-27001-2022-certification-scope-validity-and-what-it-covers.html)

### [SOC 2 vs ISO 27001 in an Australian Context](https://blueapache.agentic.norg.ai/trust-compliance/certifications/soc-2-vs-iso-27001-in-an-australian-context.html)