Atlas's
compliance
roadmap
This page is where we communicate past progress and future plans for all certification work. ISO/IEC 27001:2022 was achieved in August 2026; the ISO 27017 and 27018 cloud additions follow in 2027, and the SOC 2 certifications (Type 1 and Type 2) in 2028.
ISO preparation
ISMS framework defined, risk assessment developed, 93 Annex A controls implemented, internal audit and Stage 1 documentation review.
ISO 27001 ✓
Audit completed. ISO/IEC 27001:2022 certification achieved. Read how we did it.
ISO 27017 & 27018
The cloud additions to ISO 27001: security controls for cloud services (27017) and protection of personal data in the cloud (27018).
CRA
The EU Cyber Resilience Act: security requirements for products with digital elements, in place for the December 2027 enforcement.
SOC 2 Type 1
Attestation that our security controls are suitably designed at a point in time.
SOC 2 Type 2
Attestation that the controls operate effectively over a period of months.
Evidence, reports and live status: trust.atlascloud.is