About AMT
Certifications and compliance
AMT holds two certifications: ISO 9001:2015 for quality management, first certified in 2018, and ISO 27001 for information security, first certified in 2020. This page lists what each covers, how to verify them, and the regulations we help clients meet without claiming a certification we do not hold.
Our certificates
| ISO 9001:2015 | ISO/IEC 27001 | |
|---|---|---|
| What it covers | Quality management | Information security management |
| First certified | 2018 | 2020 |
| Current version | 2015 | 2022 |
How to verify: ask us for a copy of the certificate, then look up its number on the issuing body's register, or on IAF CertSearch if the body is listed there.
Hold, support, or do not claim
An honest list makes procurement faster than a wall of logos.
| Standard or regulation | AMT's position | What that means for you |
|---|---|---|
| ISO 27001 | We hold it | Certified ISMS covering our delivery |
| ISO 9001 | We hold it | Certified quality management |
| GDPR (EU) and UK GDPR | We support it | We sign DPAs and the 2021 SCCs, and build GDPR requirements into your system. GDPR has no certification to hold |
| India DPDP Act 2023 | We support it | We build consent, notice and breach handling into Indian-market systems as the Rules phase in through May 2027 |
| EU AI Act | We support it | We help you classify your AI system and build the logging, oversight and documentation your risk level needs. High-risk obligations were pushed back by the 2026 Digital Omnibus agreement: stand-alone high-risk systems from 2 December 2027, AI in regulated products from 2 August 2028. Check the final text in the Official Journal |
| NIS2 and DORA | We support it | If you are in scope, your supplier obligations flow down to us through the contract, and our ISO 27001 controls give you the evidence |
| SOC 2 | We do not hold it | Ask for our ISO 27001 certificate and security pack instead |
| HIPAA | We support it | We support the development of HIPAA-aligned healthcare applications, implementing safeguards such as data encryption, role-based access controls, audit logging, secure data storage, and access monitoring to help protect electronic Protected Health Information (ePHI). Compliance requirements are addressed based on the customer's specific needs and deployment environment. |
Get the company fact sheet
Legal entities, certificates, addresses and contract basics on one page, the way vendor onboarding forms ask for it.
FAQ
Is AMT ISO 27001 certified?
Is AMT ISO 9001 certified?
Is AMT's ISO 27001 certificate on the 2022 version?
How do I verify AMT's certificates?
Does the EU AI Act apply to software AMT builds for us?
Tell us what you are building. A senior engineer will reply within one business day.