Datami Achieves ISO/IEC 27001:2022 Certification

When clients trust us to assess the security of their systems, they need to be confident that we protect their information reliably. In the banking and fintech sectors, as well as among large global clients, this is often a prerequisite for establishing business relationships rather than simply a question of trust.

That is why we underwent independent certification, and we are pleased to announce that Datami LLC (Ukraine) and Datami OÜ (Estonia) have received ISO/IEC 27001:2022 certifications.

We consider this a defining accomplishment in our company's progress. We have not only demonstrated that our information security management system complies with the international standard but also opened up new opportunities to work with organizations that have strict information security requirements.

What ISO/IEC 27001:2022 Certificates Confirm

The ISO/IEC 27001:2022 standard establishes globally applicable requirements for the creation, implementation, and management of an information security management system (ISMS). It calls for a systematic approach to risk assessment, information protection, access control, and continuous improvement of security processes.

On September 30, 2026, both Datami legal entities received certificates confirming that their shared ISMS complies with ISO/IEC 27001:2022 requirements. The scope of certification covers the provision of cybersecurity services, including penetration testing.

Thanks to thorough preparation and the experience of our team, we successfully passed the certification audit on the first attempt.

The entire process took approximately six weeks.

Who Conducted the Independent Certification

The certification audit was conducted by the Estonian company BALTUM BÜROO OÜ, which provides management system certification services.

We considered several certification bodies but chose BALTUM as a trusted partner with relevant experience and a solid reputation. The experience and professionalism of its experts, combined with effortless communication, were additional deciding factors.

During the audit, the auditors focused not only on documentation but also on whether the documented policies reflected the company's actual processes. Their thoroughness once again reinforced the importance of proper preparation for an independent audit.

What ISO/IEC 27001:2022 Certification Means for Datami

For us, ISO/IEC 27001:2022 is more than just certificates. We have made considerable strides, achieving outcomes that are both significant and beneficial to our customers.

1. Strengthened our information security. We improved the protection of corporate communications, cloud infrastructure, and data storage. At the same time, these improvements help us better protect our clients' information.
2. Confirmed compliance with an international standard. Our partners now have independent confirmation that Datami's ISMS complies with ISO/IEC 27001:2022 – an additional factor when evaluating us as a potential contractor.
3. Expanded opportunities for international cooperation. ISO 27001 certification demonstrates compliance with the certification requirements of tenders held by large international organizations. For clients, this makes it easier to select a contractor.

Oleksii Lavrenchuk, Chief Growth Officer (CGO) at Datami, commented:

"Earning ISO 27001 certification serves as independent confirmation that our information security management system complies with the international standard required by our partners."

We are not stopping our efforts to strengthen our information security after receiving the certificates. We actively maintain and advance our ISMS to uphold compliance with the standard while addressing evolving client expectations.

Our Certificates:

• Datami LLC (Ukraine) – ISO/IEC 27001:2022, No. UA-ISMS-300926-1.
• Datami OÜ (Estonia) – ISO/IEC 27001:2022, No. EE-ISMS-300926-2.