This summary lists Superfast IT's current security and quality certifications and our framework alignment positions. It is provided as a single reference for client procurement and due diligence questionnaires.

Independent verification

Superfast IT's current certifications and validity dates are published live on the Blockmark certificate registry. Blockmark is an independent third-party registry that holds verified evidence of UK cyber certifications including Cyber Essentials Plus and IASME Cyber Assurance.

Verify our certifications directly: https://registry.blockmarktech.com/organisations/GBLTD04365871/

The registry is updated by the certification bodies themselves. The information on Blockmark is always current and is the authoritative source for certificate IDs, scope and validity dates.

Certifications held

• Cyber Essentials Plus — current certification status, certificate ID and expiry date are on Blockmark.
• IASME Cyber Assurance — current certification status, certificate ID and expiry date are on Blockmark.

Certificate renewal is tracked in our Information Security Governance cycle and reviewed at the quarterly governance meeting.

Framework alignment (not certified)

Superfast IT aligns to the following frameworks without holding formal certification:

• UK Cyber Assessment Framework (CAF 4) — our policies and operational practices are structured against the CAF principles. The Risk Management Approach, Logging and Monitoring Policy and Incident Response Plan map directly to CAF objectives.
• IASME Quality Principles — the SME alternative to ISO 9001. Used to evidence quality management; reflected in our Quality Policy Statement.
• Assurix Trustmark — onboarding from March 2026. Provides independent third-party continuous verification of controls and policy adherence throughout the year rather than at an annual audit point.

What we do not claim

Superfast IT does not hold, and does not claim alignment with:

• ISO 27001 (Information Security Management Systems)
• ISO 22301 (Business Continuity Management Systems)
• SOC 2 Type I or Type II
• PCI DSS