Azzera has achieved ISO/IEC 27001:2022 certification, the internationally recognised standard for information security management systems (ISMS), in the year the emissions compliance provider marks its fifth anniversary.

The certification was awarded by Prescient Security, a CREST Certified Global Top 20 Cyber Security Company, following a comprehensive audit. Its scope covers the ISMS supporting Azzera CELESTE, the company’s SaaS software for aviation emissions management, including infrastructure hosted on Amazon Web Services (AWS). The technology, people, operations and sales departments are all within scope.

As AI makes cyberattacks faster and more sophisticated, Azzera also commissions an annual penetration test of its platform, in which certified security testers simulate real-world attacks to try to gain unauthorised access to systems and data. Any vulnerabilities identified are logged, tracked and remediated within defined timelines.

In business aviation, the confidentiality of flight and aircraft registration data is a particular concern. For publicly listed airlines, operational information can be just as sensitive.

Puja Mahajan, CEO and co-founder of Azzera, adds: “Achieving ISO/IEC 27001:2022 certification in the year Azzera turns five is a key step in both the integrity and the maturity of our business.”

For operators managing emissions data across CORSIA, the EU Emissions Trading System and ReFuelEU, the certification signals that the platform handling that data has been independently assessed against a recognised security standard. CELESTE automates data validation, compliance market segregation and reporting for aircraft operators, while the Co-Pilot service provides end-to-end monitoring, reporting and verification support for clients who prefer a fully managed approach.

Azzera will undergo annual surveillance audits to maintain its certification.