What ISO/IEC 27001 tells a reviewer
ISO/IEC 27001 certifies that a company runs an information security management system: it knows its risks, has controls for them, and checks and improves those controls over time. An accredited body audits it, and surveillance audits follow every year of the three-year certificate. Reviews outside the United States often ask for it in place of SOC 2.
The certificate
- 01
What it covers
The full platform: cloud infrastructure, the software on the device, the APIs and support. Signage is unusual in that much of the risk sits in the device on the wall, and it is part of the scope.
- 02
Who issued it
Glocert International Certifications (UK) Limited, accredited under IAF and IAS. Certificate number 26ISMS-1228, issued 7 August 2026 and valid through 6 August 2029, with surveillance audits in between.
The announcement - 03
How to get it
Request the certificate and related documents from the trust center.
Alongside it
| Topic | Where Screenly stands |
|---|---|
| SOC 2 Type II | Yes, since May 2025, under NDA |
| IEC 62443 (industrial systems) | No. An SBOM is published for each ScreenlyOS release |
| UK Cyber Essentials | No |
Questions
Is Screenly certified to ISO/IEC 27001?
Yes, to ISO/IEC 27001:2022. The certificate covers the cloud platform, the software on the device, the APIs and support.
Can we see the ISO/IEC 27001 certificate and report?
Yes. Request them from the trust center at trust.screenly.io.
Does Screenly have a SOC 2 report?
Yes. A SOC 2 Type II report, audited against all five trust criteria.
Is Screenly certified to IEC 62443?
No. Screenly holds no IEC 62443 certificate and has published no gap statement. An SBOM is published for each ScreenlyOS release.