Security at DBB Software
DBB Software is certified to ISO/IEC 27001:2022, the international standard for information security management systems.
Our ISO/IEC 27001 certificate
Standard
ISO/IEC 27001:2022 (Information Security Management Systems)
Certificate number
PL260624002
Certified organization
DBB Software Sp. z o.o., al. Powstania Warszawskiego 15, 31-539 Kraków, Poland
Certification body
LMS Assessments Limited (United Kingdom)
Accreditation
EGAC (CAB #012312)
Scope
Provision of software development and IT consulting services.
Issued
24 June 2026
Certification cycle
24 June 2026 to 23 June 2029
Next surveillance audit
By 23 June 2027
Certification is maintained through annual surveillance audits. The certification body's register lists 23 June 2027, the deadline for the next audit, as the expiry date. The ISMS scope statement and Statement of Applicability are available to clients on request.
How we protect client data and code
Enforced multi-factor authentication
MFA is required on all company Google Workspace accounts, and Slack sign-in goes through them.
Least-privilege access
Access is role-based and reviewed yearly. Only management sees contracts, NDAs and personal data.
Fast offboarding
When someone leaves, their Google Workspace, Slack and GitHub access is removed within 1 business day.
Code in private repositories
Code we host lives in private repositories in our GitHub organization, with secret scanning turned on.
Working in your environment
In your repositories and infrastructure, our engineers follow your security policies and tooling.
Incident response
We follow a documented incident procedure and notify clients within the time set in their contract.
Vetted suppliers
Google Workspace, Slack and GitHub are each covered by a data processing agreement and reviewed yearly.
Need our security documentation for a vendor assessment?