Our information security management system has been independently recertified to ISO/IEC 27001 following our 2026 audit, with zero non-conformities raised — continued, evidenced assurance for the clients who trust us with their records.
Stor-a-File has been independently recertified to ISO/IEC 27001, the international standard for information security management, following our 2026 recertification audit — with no non-conformities raised.
The recertification audit, carried out by our accredited certification body in October 2026, confirmed that our Information Security Management System (ISMS) continues to meet the ISO/IEC 27001 standard in full. The auditors raised no non-conformities — only two minor opportunities for improvement, which is the mark of a mature, continuously improving security regime rather than any gap in control.
Our certification covers the people, facilities and systems we use to store, scan, process and securely destroy client records. In practice that means independently audited controls for access management, encryption in transit and at rest, full chain-of-custody and audit trails, physical and facility security at our UK sites, and documented incident and continuity management. It sits alongside our ISO 9001 (quality) and ISO 14001 (environmental) certifications, BS 10008 for legally admissible scanning, and BS EN 15713 for secure destruction.
For the businesses, NHS bodies and public-sector organisations that trust us with their most sensitive records, a current ISO 27001 certificate is more than a logo — it's independent evidence, and often a procurement requirement. Our up-to-date certificate and ISMS scope statement are available on request. See our compliance & accreditations page for the full picture, or read why organisations choose Stor-a-File.
Whatever you need stored, scanned or securely destroyed, we'll send a clear, no-obligation quote — backed by current ISO 27001 certification.
We'll be in touch, usually the same working day. Anything urgent? Call free on 0800 281857.
ISO/IEC 27001 is the international standard for information security management. Certification means an accredited, independent body has audited the way an organisation protects information — its people, processes, facilities and systems — and confirmed it meets the standard. It has to be re-audited and recertified periodically to stay valid.
Yes. We were independently recertified to ISO/IEC 27001 following our October 2026 audit, with no non-conformities raised. Our current certificate and ISMS scope statement are available on request — see our compliance page.
It's independent assurance that the security controls protecting your records — access control, encryption, chain of custody, secure destruction and more — are in place and working, not just claimed. For public-sector and regulated clients, a current ISO 27001 certificate is often a procurement requirement.