Our ISO 27001:2022 certification.
AravaliStack Technologies Pvt Ltd holds ISO 27001:2022 certification — the international standard for information security management systems. Here's exactly what's in scope, who certified us, and what it means for your deployment.
Certification scope
The ISO 27001 certification covers the development, deployment, and support of the AravaliStack sovereign cloud platform, including:
The customer's own deployment of AravaliStack is not in scope of our certification. However, the platform architecture assists customers in achieving their own ISO 27001 compliance — and we provide a detailed ISO 27001 control mapping document to support your ISMS implementation.
A 20-page guide showing how AravaliStack controls map to each ISO 27001:2022 Annex A control — helping your ISMS team implement compliance faster.
- Platform software development and release processes
- Customer support and managed services operations
- Internal IT systems and developer workstations
- Vendor and sub-processor management
- Physical security of New Delhi HQ
- HR security (screening, access revocation)
- Business continuity and disaster recovery
- Certificate of Conformity
- Certificate Number IS/IEC 27001-2022/XXXXX
- Standard ISO/IEC 27001:2022
- Certified by Bureau Veritas (NABCB Accredited)
- Valid from January 2024
- Valid until January 2027
- Surveillance audits Annual · Last: Nov 2025