We’re pleased to share that GuardPass has achieved ISO/IEC 27001:2022 certification for the information security management system behind our platform. The certification was awarded by SGS United Kingdom Ltd and covers the provision of our SaaS services.
Every day, security employers use GuardPass to hire, vet and onboard officers. That means our platform handles sensitive information: identity documents, right to work evidence, employment history and screening results. Protecting that information has always been part of how we work. Now it has been independently audited and certified against an internationally recognised information security standard.
So what does ISO/IEC 27001 certification mean for employers and candidates who use GuardPass? Here’s a closer look.
ISO/IEC 27001:2022 Certification for GuardPass
ISO/IEC 27001 is the international standard for information security management systems (ISMS), developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It gives organisations a structured, risk-based framework for identifying, assessing and managing information security risks, so that information stays confidential, accurate and available to the people who need it.
To achieve certification, an organisation has to show that it has put the right policies, processes and controls in place, and that they work in practice. The 2022 version of the standard includes 93 controls covering people, processes, physical security and technology.
The standard covers areas such as risk assessment, access control, supplier management, incident management and business continuity. Each certified organisation also produces a Statement of Applicability, which sets out the controls it applies and why. Our certification is based on our Statement of Applicability, so the controls we use are documented, justified and independently reviewed.
SGS United Kingdom Ltd audited GuardPass against these requirements and certified our information security management system for the provision of our SaaS services (certificate number PK26/00000132). The certificate is valid until October 2029 and stays in place subject to regular surveillance audits, so our controls continue to be checked independently, not just once.
Beyond the Certificate: What It Means for You
A certificate on its own doesn’t change much. What matters is how it affects the employers and candidates who rely on GuardPass every day. Here’s what it means in practice:
- Confidence in how data is handled: Security recruitment and screening involve a lot of personal information. With GuardPass, the system that manages that information has been independently audited and certified to ISO/IEC 27001:2022, so employers and candidates know it is handled within a recognised framework.
- Easier supplier checks: Clients often ask their suppliers how they protect data. Working with an ISO/IEC 27001 certified platform gives you a clear, recognised answer when your own clients or auditors ask how candidate information is managed.
- Ongoing, not one-off: Certification isn’t a single inspection. Our information security management system is reviewed through regular surveillance audits, and the standard requires us to keep assessing risks and improving our controls over time.
Why This Matters for Security Recruitment
Security employers are trusted to protect people, property and sites. The tools they use to recruit and vet their officers should meet the same high standards. When a candidate uploads their passport or shares five years of employment history for BS7858 screening, they need to know that information is safe.
A lot of information moves through our platform. Employers post vacancies and review applications through GuardHire. Candidates share identity documents, address history, right to work evidence and SIA licence details. GuardCheck then uses that information to complete BS 7858:2019 screening. Each of these steps relies on information being handled carefully, by the right people, for the right reasons.
ISO/IEC 27001 sits alongside GuardCheck’s NSI Silver Approval for BS 7858:2019 screening. Together, they show that both the quality of our screening and the security of the information behind it have been independently assessed.
For candidates, it means the personal information they share when applying for jobs or completing screening is protected by a certified information security management system. For employers, it means one less question to answer when clients ask how their supply chain handles data.
Our mission is to give security employers the tools they need to hire with confidence. This certification reflects our commitment to protecting the information that makes that possible, and we’ll continue to build security into everything we do.
Ready to hire and screen on a platform built with security at its core? Book a demo to get started.