Next Communications operates an Information Security Management System certified to ISO/IEC 27001:2022 by an accredited third party. Enterprise buyers, banks and card networks can validate our certification independently — the registration number and verification route are published below.
ISO/IEC 27001 is the international standard for information security management. Certification means an accredited external auditor has examined our controls, policies and operating practice — and will re-examine them on a fixed surveillance cycle for the life of the certificate.
Scope matters more than the badge. Ours is stated on the certificate as:
“Provision of Information Security Management for the Design, Development, Operation and Support of AI-native Software-as-a-Service (SaaS) Telecommunications Orchestration Platform.”
That is the platform itself — not a peripheral system or a single office. The orchestration layer our enterprise customers integrate with is inside the certified boundary.
The certification body publishes a verification service at lmscert.me, where the registration number above can be checked against their register.
Certification is awarded against evidence of how the business actually runs. These are the disciplines an ISO 27001 audit examines and continues to re-examine.
Information security risks are identified, owned and treated through a documented, repeatable process rather than ad hoc judgement.
Documented and ownedLeast-privilege access to production systems and customer data, with joiner-mover-leaver process and periodic review of entitlements.
Least privilegeDefined detection, escalation and notification paths, so a security event has an owner and a clock from the moment it is raised.
Defined escalationInternal audit plus scheduled external surveillance audits. The certificate is maintained by evidence, and lapses without it.
Surveillance cycleOur customers are banks, card networks, fintechs and airlines. Their procurement and risk teams set the bar, and the platform is built to clear it.
Next Communications B.V. is domiciled in the Netherlands and operates under EU data protection law.
We publish our security posture as it stands, including work still in flight.
If your due-diligence process needs something we have not listed, ask. We would rather tell you where we are than imply more than we hold.
Vendor assessments, DPAs and architecture reviews are a normal part of how we sell. Email sales@nextcommunications.nl with your questionnaire or security requirements and our team will route it to the right people.