ISO Certifications & Assurance Reporting

Getronics’ services and operations are aligned with the world’s most respected standards and frameworks. Our processes are based on the IT Infrastructure Library (ITIL ® ) service management framework, and our organisation is ISO-certified with a focus on Continual Service Improvement and Customer Satisfaction.

We are committed to ensuring that the services we provide are fully aligned to our clients’ business goals. Getronics has developed and refined its Global Service Delivery Model to ensure a consistent and controlled service process worldwide.

Getronics is certified to:

  • ISO 9001:2015, Quality Management
  • ISO 14001:2015, Environmental Management
  • ISO 20000-1:2018, IT Service Management
  • ISO 22301:2019, Business Continuity Management
  • ISO 27001:2013, Information Security Management
  • ISO 50001:2018, Energy Management
  • ISO 45001:2018 Occupational Health & Safety Policy Management Systems
  • Cyber Essentials Basic Certification
  • Cyber Essentials Plus Certification
  • CMMI-DEV v2.0 Maturity level 3
  • Esquema Nacional de Seguridad (ENS) Spain

Getronics has also commissioned independent SOC 1 and SOC 2 Type 2 Assurance Reports of its organisational controls. Further details of the above ISO and SOC 2 report activities are presented below:

Quality Management

Getronics operates a global ISO 9001:2015 registered Quality Management System (URS certificate QMS 133414/A/0001/UK/En) in the UK, Spain, Germany, France, Hungary, Portugal, Romania, Netherlands, Brazil, Italy, India and Malaysia. Certification is based on regular assessments carried out by an accredited certification body against the Standard.

The QMS establishes the base processes for document and records control, internal audit and management review, and a key element is to focus on customer satisfaction and address any complaints, with continual improvement of our services and processes as a goal.

URS Certificate/Licence Number: 133414/A/0001/UK/En

Quality Management Policy Statement


Environmental Management

Getronics operates an ISO 14001:2015 registered Environmental Management System (URS certificate EMS 133414/B/0001/UK/En) in the UK, Spain, Portugal, Chile, and The Netherlands. The EMS includes processes to ensure that Getronics complies with environmental legal requirements, identifies the environmental aspects of the Company’s activities, and sets objectives and targets for environmental improvement and reduction of our environmental impact.

URS Certificate/Licence Number: EMS 133414/B/0001/UK/En

Environment Management Policy Statement



Service Management

Getronics operates an ISO 20000-1:2018 registered IT Service Management System (URS certificate ITSMS 133414/D/0001/UK/En), in the UK, Netherlands, and Spain. The SMS includes processes for service planning and introduction, service delivery management, business relationship management, project management, IT service continuity management, continual service improvement, and the typical ITIL-based disciplines for service request, incident, problem, change, release, availability, capacity, asset, knowledge management, customer satisfaction, and configuration management.

URS certificate ITSMS 133414/D/0001/UK/En

Service Management Policy Statement



Business Continuity Management

Getronics operates an ISO 22301:2019 registered Business Continuity Management System (URS certificate BCMS 133676/A/0001/UK/En), in India, Spain and Romania delivering Cloud services. Its key focus is to ensure that Getronics has carried out a business impact analysis and implemented and tested appropriate business continuity plans to minimize the disruption to service delivery in the event of a major incident affecting one or more of our locations.

URS certificate BCMS 133676/A/0001/UK/En

Business Continuity Management Statement



Information Security Management

Getronics operates a global ISO 27001:2013 registered Security Management System (URS certificate IS 133414/C/0001/UK/En) in the UK, Spain, Germany, France, Hungary, Romania, Netherlands, Italy, India, Belgium, Singapore, Brazil and Malaysia. To ensure compliance with our own policies and processes, customer policies and regulatory requirements, we have employed automated tools, legal requirements registers, security awareness training, and record and investigate security incidents, as well as carrying out regular independent internal audits.

URS certificate IS 133414/C/0001/UK/En

Information Security Management Policy Statement



Energy Management

Getronics operates an ISO 50001:2018 registered Environmental Management System (URS certificate ENMS 133678/A/0001/UK/En, Bureau Veritas certificate ES143597-1) for its Data Centres in the UK, and Spain’s offices, which supports organisations in all sectors. The Energy Management Systems helps the organisation to use energy more efficiently, through the planning and review of energy performance, and the setting of objectives and targets for improvement. We consistently monitor and measure results, in order to focus on continually improving our energy management and reducing our environmental impact.

URS certificate ENMS 133678/A/0001/UK/En
Bureau Veritas certificate ES143597-1

Energy Management Policy Statement

Declaración de la política de gestión de la energía (España)



Occupational Health & Safety Management Systems

Getronics operates an ISO 45001:2018 registered occupational health and safety management systems (Bureau Veritas certification ES130385-2) for Getronics in Spain. This certification gives guidance for its use to enable organisations to provide safe and healthy workplaces by preventing work-related injury and ill health, as well as by proactively improving its OH&S performance.

Bureau Veritas certification: ES130385-2

OH&S Policy Statement (ES)


Assurance Reporting

Getronics has commissioned various independent attestation reports:

  • SOC 2 (Service Organisation Controls) Type 2 report relevant to security, privacy and availability for its Cloud Services and Service Desk undertaken through its locations across Europe and India.
  • SOC 2 (Service Organisation Controls) Type 2 report relevant to security and availability for its Digital Insight, Digital Workplace, Field-on site, and Service Desk Services through its locations across Europe and India.
  • SOC 1 (Service Organisation Controls) Type 2 report relevant to security and availability for its Digital Insight, Digital Workplace, Field-on site, and Service Desk Services through its locations across Europe and India.

Please, contact us for a report.

Esquema Nacional de Seguridad (ENS)

Getronics Spain has obtained the highest security certification in the National Security Scheme that allows Getronics to provide its services to the Spanish public sector in compliance with the most demanding and rigorous standards that guarantee complete confidentiality to citizens in their electronic operations.

The scope of the 34/5704/23/10023 certification covers the portfolio of information systems of Getronics Cloud, workplace and infrastructure management portfolio consisting of compute, storage, network & security, backup, databases, middleware, and security operation center.

The scope of the 3434/5704/24/03020 certification covers the activities of design, development, support and evolutionary, corrective and perfective maintenance of applications.

Both certifications cover nearly the entire Getronics Spain business.


Cyber Essentials

Getronics UK has successfully achieved the UK Government’s Cyber Essentials & Plus certifications. This certification demonstrates that we meet the requirements for delivering secure services to our customers. The Cyber Essentials Plus assessment was completed by a qualified, independent auditor who evaluated and tested Getronics with technical security controls simulating common cyber threats. Our prior accreditation, Cyber Essentials, has been upgraded to Cyber Essentials Plus, the highest level of certification available under the Cyber Essentials scheme.

Cyber Essentials Basic Certification: e0cc820d-0edb-498c-b90f-6fe8b26b7c0c

Cyber Essentials Plus Certification: acca9576-1dd6-4fa0-851c-e3c05cc63aba

European Data Centre Code Of Conduct

Getronics UK has Participant Status in the European Data Centre Code Of Conduct, which aims to inform and stimulate Data Centre operators and owners to reduce energy consumption in a cost-effective manner without hampering the mission critical function of data centres. As an official participant, Getronics is committed to following the intent of this Code of Conduct and abide by a set of agreed obligations.


Safecontractor Approved

Getronics is committed to operating a safe, compliant and ethical business, impersonating our core values as we soar higher.

Alcumus SafeContractor is a leading third party accreditation scheme which recognises extremely rigorous standards in health and safety management amongst contractors. Our SafeContractor certification brings peace of mind to our customers, and positions us as a company safe-to-use.

Learn more: www.safecontractor.com