This summary lists Superfast IT's current security and quality certifications and our framework alignment positions. It is provided as a single reference for client procurement and due diligence questionnaires.
Independent verification
Superfast IT's current certifications and validity dates are published live on the Blockmark certificate registry. Blockmark is an independent third-party registry that holds verified evidence of UK cyber certifications including Cyber Essentials Plus and IASME Cyber Assurance.
Verify our certifications directly: https://registry.blockmarktech.com/organisations/GBLTD04365871/
The registry is updated by the certification bodies themselves. The information on Blockmark is always current and is the authoritative source for certificate IDs, scope and validity dates.
Certifications held
- Cyber Essentials Plus. Current certification status, certificate ID and expiry date are on Blockmark.
- IASME Cyber Assurance. Current certification status, certificate ID and expiry date are on Blockmark.
Certificate renewal is owned by the Information Security Manager and tracked in the GRC Recurring Tasks Calendar.
Framework alignment (not certified)
Superfast IT aligns to the following frameworks without holding formal certification:
- UK Cyber Assessment Framework (CAF 4). Our policies and operational practices are structured against the CAF principles. The Risk Management Approach, Logging and Monitoring Policy and Incident Response Plan map directly to CAF objectives.
- IASME Quality Principles. The SME alternative to ISO 9001. Used to evidence quality management; reflected in our Quality Policy Statement.
- Assurix Trustmark. In progress. We began onboarding in March 2026 and are working through the control evidence requirements with our Assurix assessor. The platform will provide independent third party continuous verification of controls and policy adherence throughout the year rather than at a single annual audit point. We will confirm here when the Trustmark is awarded.
What we do not claim
Superfast IT does not hold, and does not claim alignment with:
- ISO 27001 (Information Security Management Systems)
- ISO 22301 (Business Continuity Management Systems)
- SOC 2 Type I or Type II
- PCI DSS