We maintain relevant certifications to ensure our clients and partners have the highest level of confidence that we are aligned with industry best practices and deliver innovative, secure and sustainable solutions.

In January 2025, we achieved our fourth consecutive SOC 2 Type II attestation covering both software development and our ‘Run by Endava’ operations.

 

System and Organization Controls (SOC) 2 is a comprehensive reporting framework put forth by the American Institute of Certified Public Accountants (AICPA) in which independent, third-party auditors carry out an assessment and subsequent testing of controls relating to the Trust Services Criteria (TSC) of security, availability, processing integrity, confidentiality and privacy.

ISO22301

ISO 22301

We have a comprehensive Business Continuity Management System (BCMS) in accordance with ISO 22301:2019, the international standard for business continuity. It requires tangible plans for delivery locations and IT systems in case of disasters. Our plans are in place and cover a wide array of impact scenarios, ensuring we are well prepared for potential disruptions. By maintaining an agile and adaptive approach to risk assessment and mitigation, we aim to safeguard our operations and ensure continuity of service, regardless of geopolitical developments.

SARC-Logo

ISO 27001

We continue to expand our Information Security Management System (ISMS) certification to ISO 27001 to all our delivery locations and activities. Successfully maintaining and extending the ISO 27001 attests to our robust security practices and comprehensive risk management approach.

 

The certification confirms the controls we have in place for the in-scope systems that are designed to mitigate risks, prevent unauthorised access, and maintain the confidentiality, integrity and availability of data.

 

Download our ISO 27001 certification for Endava UK Limited and contact us for certifications from other locations.

IQNET

ISO 14001

We are also continuing to maintain our environmental management system across Romania and Moldova. In FY2024, we successfully completed the supervision audit for ISO 14001 certification in 11 locations across the two countries, ensuring ongoing compliance. In FY2024, 48% of Endavans worked in ISO 14001-certified locations.

Download ISO 14001 certificates for our legal entities: Romania, Moldova

IQNet-Logo

ISO 9001

Our intelligent Quality Management System (QMS) is certified to ISO 9001. Through QMS, we ensure the quality of our digital products and services. Our quality assurance process is incorporated into our delivery framework, The Endava Adaptive Model (TEAM). Additionally, our internal audit process and cross-project reviews provide operational monitoring throughout projects to help ensure the highest quality delivery.

pattern-subtle-light

SOC 2 Type II Attestation

Since 2021, we have annually undergone SOC 2 Type II audits for operational effectiveness.

 

In January 2024, we successfully completed our SOC 2 Type II attestation for software development and ‘Run by Endava’ operations for the third year running. This achievement highlights our commitment to the most rigorous controls to ensure data security, availability and confidentiality.

 

The trust services criteria, developed by the American Institute of Certified Public Accountants (AICPA), are ‘gold standards’ for assessing service provider security.

SOC 2 Type II Attestation

Since 2021, we have annually undergone SOC 2 Type II audits for operational effectiveness.

 

In January 2024, we successfully completed our SOC 2 Type II attestation for software development and ‘Run by Endava’ operations for the third year running. This achievement highlights our commitment to the most rigorous controls to ensure data security, availability and confidentiality.

 

The trust services criteria, developed by the American Institute of Certified Public Accountants (AICPA), are ‘gold standards’ for assessing service provider security.

cyber-essentials480px

CyberEssentials

In April 2024, Endava became Cyber Essentials Certified. Cyber Essentials certifies organisations through annual assessments that they have the proper level of cyber security protection. This certification is backed by the UK government and overseen by the National Cyber Security Centre.

pattern-subtle-light

Trusted Information Security Assessment Exchange (TISAX) Certifications

Our Berlin and Timisoara offices hold Trusted Information Security Assessment Exchange (TISAX) certifications. The TISAX certification is an internationally recognized standard for data security in the automotive industry.

Trusted Information Security Assessment Exchange (TISAX) Certifications

Our Berlin and Timisoara offices hold Trusted Information Security Assessment Exchange (TISAX) certifications. The TISAX certification is an internationally recognized standard for data security in the automotive industry. TISAX is a registered trademark and governed by ENX Association.