Certifications
Terravek's current management system certifications, their scope and expiry.
Terravek maintains certified management systems for quality, information security, environment and occupational health and safety. The register below is the authoritative list; certificates themselves are available on request from compliance@terravek.com.
| Standard | Scope | Certification body | Certificate no. | Sites | Current since | Expires |
|---|---|---|---|---|---|---|
| ISO 9001:2015 | Quality management — design, development and delivery of geospatial analytics services | Kesteren Certificatie B.V. | NL-QMS-118427 | All offices | 2 Nov 2023 | 1 Nov 2026 |
| ISO/IEC 27001:2022 | Information security management for ORBIS Cloud, ATLAS API and corporate IT | Kesteren Certificatie B.V. | NL-ISMS-204993 | Delft, Tallinn, München, Bristol | 19 Mar 2025 | 18 Mar 2028 |
| ISO 14001:2015 | Environmental management system | Kesteren Certificatie B.V. | NL-EMS-171208 | Delft, München, Tallinn | 25 Jun 2024 | 24 Jun 2027 |
| ISO 45001:2018 | Occupational health and safety, including field and ground-station operations | Kesteren Certificatie B.V. | NL-OHS-133560 | All offices and field sites | 14 Aug 2023 | 13 Aug 2026 |
| ISO/IEC 27017:2015 | Cloud security controls for ORBIS Cloud | Kesteren Certificatie B.V. | NL-CLD-204994 | Delft, Tallinn | 19 Mar 2025 | 18 Mar 2028 |
| ISO 19157 conformance statement | Geographic information — data quality reporting for ORBIS deliverables | Self-declared, third-party reviewed | TVK-QS-2024-01 | Product-wide | 30 Jan 2024 | — |
| SOC 2 Type II | Security, Availability and Confidentiality trust services criteria for ORBIS Cloud | Halbrook & Meyers LLP | Report ref. HM-2025-TVK-04 | ORBIS Cloud eu-nl-1, eu-de-1 | 1 Oct 2025 | 30 Sep 2026 |
| TISAX AL2 | Assessment level 2 for automotive-sector corridor mapping data | ENX-registered assessor | TX-2024-88213 | München | 11 Nov 2024 | 10 Nov 2027 |
| Cyber Essentials Plus | UK entity endpoint and boundary controls | Certification body ref. CE-4418 | CEP-2025-4418 | Bristol | 6 May 2025 | 5 May 2026 |
What a certificate does and does not mean
A certificate proves there is a management system: risks are identified, controls chosen deliberately, exceptions recorded and approved by someone with authority to accept the risk, and somebody checks.
It does not, by itself, prove that the practice behind it is excellent. Anja Brenner has written an honest account of what the audit cycle involves.
Requesting evidence
For customer due diligence we can provide, without a non-disclosure agreement:
- ISO certificates (PDF, current)
- Statement of Applicability summary
- ORBIS Cloud security whitepaper
- Standard questionnaire responses
The SOC 2 Type II report requires a mutual NDA. Request via compliance@terravek.com.
Certification contacts
- Quality & Certification Manager
- Anja Brenner — Quality & Certification Manager
- Internal audit
- Helena Vos — Consultant, Management Systems
- Information security (ISMS owner)
- Ingrid Halvorsen — Chief Information Security Officer
- General enquiries
- compliance@terravek.com
- Certification body
- Kesteren Certificatie B.V. (ISO standards)