DataProtac is an independent consultancy and is not a certification body. It does not issue ISO 27001 certificates. Instead, DataProtac provides services that support organisations in assessing and improving their readiness for an official ISO 27001 certification audit, which must be conducted by an accredited certification body. Any references to “ISO 27001” or “ISO 27001 compliance” relate solely to the scope of DataProtac’s advisory services and do not indicate any affiliation with, or endorsement by, a certification authority. DataProtac does not hold accreditation to grant ISO 27001 certification, nor can it guarantee certification or full compliance. For official certification, organisations should engage with an appropriately accredited certification body.