Security and quality: R&R Software further strengthens its operations

In October 2026, R&R Software successfully completed its ISO 9001:2015 and ISO 27001:2022 certification audits. The certifications confirmed that the company’s integrated quality and information security management system meets the requirements of both standards. This system supports continuous improvement in the quality and security of operations, products and services, the achievement of customer satisfaction objectives, and sustainable operations over the long term.

Security, quality and business continuity requirements for enterprise digital solutions continue to evolve. R&R Software consistently aligns its internal operations, software development, application operations and customer services with these requirements. Its security policies now also cover the use of artificial intelligence.

R&R Software’s solutions also support customers’ NIS2 and DORA compliance activities. The company conducted a self-assessment of the security functionality of the relevant software products and documented the capabilities supporting customers’ NIS2 compliance in a statement of conformity. The assessment findings also support customers subject to DORA in their preparations and help meet their information needs regarding the software supplied.

A unified approach to information security

R&R Software’s own NIS2 audit was a major milestone in its information security improvements over the past 18 months. As a company subject to NIS2 requirements, the audit focused on the security of its internal IT operations as well as the cloud platform and software services—PaaS and SaaS—it provides to customers.

During preparation for the audit, R&R Software consolidated its information security measures into a unified framework and introduced organizational controls to support the early detection of security threats and the proactive, systematic management of risks. These controls also formed the basis of a comprehensive information security management system.

A certified management system covering all areas of operations

In preparing for ISO 27001:2022 certification, the company built on the controls introduced for NIS2 compliance and incorporated them into an integrated management system aligned with its quality management processes.

The preparatory review covered 12 organizational units, taking into account the requirements of ISO 9001:2015 and ISO 27001:2022, as well as the organizational security controls introduced for NIS2.

The resulting system covers all areas of R&R Software’s operations, including application development and operations. Quality and security requirements are addressed within a single management framework, from development through to ongoing operation. This supports service reliability and availability, consistent risk management, and continuous improvement aligned with customer needs.

Responsible AI use and sustainable operations over the long term

To improve efficiency and competitiveness, R&R Software treats the use of artificial intelligence in development, service delivery and internal operations as a strategic priority. The company also develops AI solutions and enhances its existing products with AI components.

Security policies are evolving alongside these technological advances. The company’s “Terms of Use and Security Policy for Artificial Intelligence” is an integral part of its security policy framework. This approach supports innovation in line with information security requirements.

Continuous improvement, clearly defined operating procedures and verifiable processes share a common purpose: enabling R&R Software to support its customers as a reliable digital partner over the long term. These achievements further strengthen the company’s ability to develop, deliver and operate comprehensive digital solutions for organizations with demanding security requirements.

The ISO 9001:2015 and ISO 27001:2022 certificates are available to view and download here: