Eupago is ISO/IEC 27001:2022 certified

The certification demonstrates that Eupago's Information Security Management System has been assessed and certified in accordance with the requirements of the ISO/IEC 27001:2022 standard, within the defined scope. In practice, it shows that processes, controls and management practices are in place to support information security, with monitoring and continuous improvement.

The audit process includes the analysis of security documentation, procedures and records, as well as the practical verification of processes in Eupago's day-to-day operations.
It may also include interviews with teams and an assessment of how security controls are implemented, monitored and maintained.
This helps confirm that the Information Security Management System is not only documented, but also integrated into the Eupago’s practices and responsibilities.

It is the set of policies, processes, responsibilities and controls that an company uses to manage information security in a structured way.
Its purpose is to support the confidentiality, integrity and availability of information through consistent management, monitoring and continuous improvement practices.

You can access the official certificates on this page, available in Portuguese, English and Spanish. View Certificates

The certificate is valid until 7 May 2029.

AENOR is an international certification, inspection and training organization, recognized in the Iberian and European markets for the assessment and certification of management systems.
In Eupago’s case, AENOR was the entity responsible for assessing and certifying the conformity of the Information Security Management System with the requirements of the ISO/IEC 27001:2022 standard, within the certified scope.