The certifications reflect Finova’s commitment to the highest standards of information security and cloud governance
19 May 2026 - Finova, one of the UK’s leading providers of cloud-based mortgage, savings and lending software, has been awarded ISO 27001 and ISO 27017 certifications.
The ISO certifications are a testament to Finova’s long-term investment into the security, governance and operational resilience of its cloud-native SaaS platforms.
ISO 27001 was awarded to Finova’s Information Security Management System (ISMS). It confirms that Finova has installed structured controls to protect the confidentiality, integrity and availability of its clients’ data.
ISO 27017 recognises best practice cloud security controls, including access management, monitoring and secure cloud operations.
The certification process was overseen by an independent and accredited UKAS-approved firm. It required Finova to provide evidence of its investment into business-wide security controls, governance frameworks, and oversight processes.
James Dorrington, Director of Risk & Compliance at Finova, said:
“To receive both the ISO 27001 and the ISO 27017 certifications in such rapid succession is a major milestone in Finova’s history. It’s a testament to a huge amount of work by a lot of talented people, who are all devoted to upholding the highest standards of security, governance, and risk. Security is not an afterthought; it’s at the absolute core of everything we do.
“For our clients, these certifications are official proof that when they work with us, their data will be housed in a well-governed environment. For us, it’s the latest step in our ongoing journey to create the most secure and robust cloud-native SaaS platforms in the market.”
