NatWest Boxed achieves ISO 27001 certification

We’re pleased to share that NatWest Boxed is now ISO 27001 certified.

Gaining this certification is independent, external validation of our well established and consistently implemented security programme across Boxed, as well as our commitment to protecting the data of our partners and customers. While many organisations certify only a single department or "silo," we chose to certify the entirety of NatWest Boxed.

This ensures that as Boxed scales and innovates, our security posture will continue to evolve at the same pace; keeping customer data secure, systems available and ensuring partner confidence.

The ISO 27001 certification covers everything we build and run at Boxed, and includes many key areas including;

• How we manage security and resilience risks

• How we build and run secure solutions

• How we have secure operating processes

• Our people's understanding of their (security) responsibilities

• Our commitment to continuous improvement of our security and resilience practices

ISO 27001 is not just a point in time ‘certification’ - we must demonstrate ongoing risk management and security improvements in order to maintain it.  Security and resilience are not a destination, they are a continuous journey that must grow and mature as our organisation scales and to keep ahead of the continuously evolving threat landscape.

A recurring challenge for scaling fintechs is maintaining speed without sacrificing security. At Boxed, we’re proving that these two goals aren't mutually exclusive. We combine the speed and agility of a dynamic scaleup, with the rigorous security posture typically reserved for global financial institutions. By maintaining this standard, we ensure that as Boxed grows, we continue to deliver the safety, legal compliance, and operational excellence our partners expect. 

I’m personally super proud of this achievement, particularly as it applies to the entirety of Boxed, not just a single department or silo. This reflects the commitment of every Boxed employee to making safety and security central to our ways of working.

*ISO 27001 certified by BSI under certificate number 828265