Security and compliance
Security you can audit.
Techrays Labs delivers under an ISO 27001:2022 certified information security management system and an ISO 9001:2015 certified quality management system.
(01) Certifications
Two certifications, one standard of delivery.
- ISO 27001:2022Information security management
- Risk-based security controls across people, process and technology
- Access control, change management and incident response
- Independently audited on a recurring cycle
Certificate available on request →
- ISO 9001:2015Quality management
- Documented, repeatable delivery process
- Defined review, testing and acceptance gates
- Continuous improvement based on client feedback
Certificate available on request →
(02) How we work securely
Security is part of every sprint.
Secure development lifecycle
Threat modelling and security requirements before code.
Peer review on every change
No code ships without a second engineer reviewing it.
Dependency and vulnerability scanning
Automated checks on every build.
Secrets management
No credentials in code. Vaulted and rotated.
Least-privilege access
Role-based access, reviewed regularly.
Encryption everywhere
In transit and at rest, by default.
Backups and recovery
Tested restores, not just scheduled backups.
Incident response
Defined roles, escalation and client notification.
(03) Your data and IP
Your code, your data, your accounts.
100% IP ownership
All code, designs and documentation are yours from day one.
NDA by default
Signed before we see your idea, product plans or data.
Your cloud accounts
Infrastructure is created in accounts you own and control.
(04) Compliance for your product
Built for the regulations you face.
- PCI-DSS aware design
- GDPR
- PSD2 and open banking
- AML and KYC workflows
- HIPAA experience
- SOC 2 controls
- GST and VAT reporting
- Data residency
Security pack
Request our security pack
Certificates, security policy summary and a completed due-diligence questionnaire.
Start a project