Watch Taking a Sledgehammer to Bottlenecks 🎥 as Ruth & Steph show how AI actually fixes margins.

Certifications & Attestations

Certifications and attestations

GoSmarter runs on Microsoft Azure, which holds a broad set of compliance certifications. This page explains which certifications apply to our deployment and how to request evidence.

This page provides a high-level summary. Detailed assurance evidence can be shared under mutual NDA where appropriate.

GoSmarter application-level certifications

We are progressing our application-level assurance roadmap to provide additional independent validation of our security controls and operating practices.

Azure platform certifications

Microsoft Azure maintains certifications and attestations that cover the core managed services GoSmarter depends on.

StandardStatusScope
ISO 27001CertifiedAzure platform — information security management
ISO 27017CertifiedAzure platform — cloud security controls
ISO 27018CertifiedAzure platform — protection of personal data in the cloud
SOC 1 Type IIAttestedAzure platform — financial reporting controls
SOC 2 Type IIAttestedAzure platform — security, availability, processing integrity
SOC 3AttestedAzure platform — publicly available summary
CSA STARCertifiedAzure platform — cloud security
Cyber Essentials PlusCertifiedAzure platform — UK government scheme
GDPRCompliantAzure platform — EU data protection

Full details: Microsoft Azure Compliance Offerings

How to request compliance evidence

We can provide the following for your security review:

  1. Azure compliance reports: Available through the Microsoft Service Trust Portal (SOC reports, ISO certificates, pen test summaries)
  2. GoSmarter security documentation: This trust centre and supporting high-level material
  3. Data Processing Agreement information: Available on request
  4. Compliance call: A conversation with our team to answer specific questions

Requesting reports under NDA

Some compliance evidence is shared under a mutual NDA. To request it:

  1. Contact us at talktous@gosmarter.ai
  2. Specify which reports or information you need
  3. We’ll arrange NDA execution if required and provide the reports

Key points for your security team

  • Azure platform certifications: SOC 2 Type II, ISO 27001/27017/27018, Cyber Essentials Plus, and more
  • Service Trust Portal: Self-service access to Azure compliance reports
  • Application-level assurance roadmap: Additional independent validation is in progress
  • Evidence available under NDA: Information that is not publicly available can be shared under a mutual NDA

Request evidence

Email us, contact us online, or book a compliance call to request the NDA pack.