> For the complete documentation index, see [llms.txt](https://trust.memori.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://trust.memori.ai/en/certifications/certifications-overview/iso-certifications.md).

# ISO certifications

Details of the standards adopted by Memori s.r.l.

#### [ISO 27001:2022 Certificate](/en/certifications/certifications-overview/iso-certifications/iso-27001-2022-certificate.md)

**Information Security Management System (ISMS)**

Defines the requirements for implementing, monitoring and improving an information security management system. It covers information risk management, asset protection, access controls and incident response. For AIsuru, it ensures that customer data — conversations, Agent content, configurations — is protected by formal and verifiable procedures.

#### [ISO 27017:2021 Certificate](/en/certifications/certifications-overview/iso-certifications/iso-27017-2021-certificate.md)

**Security for cloud services**

Extends ISO 27001 with specific controls for cloud environments. It governs the shared responsibilities between provider and customer, the management of virtual assets and the security of multi-tenant infrastructures. Particularly relevant for AIsuru, which runs on AWS, Cloudsome and Hetzner architectures with SaaS, PaaS and On-Premise models.

#### [ISO 27018:2020 Certificate](/en/certifications/certifications-overview/iso-certifications/iso-27018-2020-certificate.md)

**Protection of personal data in the cloud (PII)**

Establishes the principles for the processing of personally identifiable information (PII) by public cloud service providers. It ensures that Memori — as Data Processor — does not use customer data for its own purposes, and that data remains the exclusive property of the customer.

#### [ISO 9001:2015 Certificate](/en/certifications/certifications-overview/iso-certifications/iso-9001-2015-certificate.md)

**Quality Management System (QMS)**

The fundamental standard for the quality of organizational processes. It covers planning, operational control, supplier management and continual improvement. For Memori it applies to the entire software development lifecycle: from requirements gathering to release, from incident management to customer support.

#### [ISO 42001:2023 Certificate](/en/certifications/certifications-overview/iso-certifications/iso-42001-2023-certificate.md)

**Artificial Intelligence Management System (AIMS)**

The first international standard dedicated to AI systems. It requires organizations to define policies, roles, risk assessment processes and mitigation measures specific to artificial intelligence systems. For AIsuru, it translates into structured governance of the NLP engine, the integrated LLM models and the generative features — in line with the requirements of the European AI Act.
