What ISO 27001 means
ISO 27001 certification represents a comprehensive, independently audited information security management system (ISMS). It demonstrates that we have:
-
Structured security governance across all operations – access management, encryption, incident response, vendor assessment
-
Independent verification – our controls have been independently audited and confirmed to work in practice by a UKAS-accredited certification body. Learn more about UKAS accreditation.
-
Embedded accountability – Information security isn't an afterthought; it's built into how we operate and deliver for our customers.
Why it matters for AECO
The architecture, engineering, construction, and operations (AECO) sectors handle sensitive data – design files, project plans, budgets – and operate IT systems that underpin critical infrastructure. Many customers operate in regulated or safety-critical environments where security requirements are non-negotiable.
ISO 27001 certification gives them assurance that Hoppa protects their data with best-in-class security controls, maintains independently verified security practices, responds effectively to incidents, and manages vendor and supply chain risks responsibly.
What this unlocks
For procurement and compliance, ISO 27001 eliminates friction. Many organisations, particularly large contractors, public sector clients, and regulated businesses, require proof of a functioning security management system. Certification accelerates those conversations, providing confidence that Hoppa can be trusted with sensitive data and workflows.
Our commitment
"Many of our customers operate national infrastructure in safety-critical environments where security is essential," says Tom Goldsmith, CTO and Co-founder at Hoppa. "ISO 27001 certification demonstrates the importance we place on protecting their information. Our customers can trust us to be a responsible steward of their data today – with the systems and discipline to maintain and strengthen that commitment as we grow."
Our ISO 27001 certificate issued by Tempo Audits (UKAS accredited) can be viewed here.
About Hoppa
Hoppa is an AI-powered data refinery purpose-built for the AECO sector. We help infrastructure owners and their supply chains automatically organise, classify and govern the documents and data created over an asset's lifecycle – turning fragmented, hard-to-find information into structured, reliable data that teams can use. Hoppa sits on top of existing systems as an integration and automation layer, maintaining customer custody of information and empowering human teams to make decisions with confidence.
