reev receives ISO/IEC 27001:2022 certification

What the certification covers

ISO/IEC 27001 is more than a technical standard – it is an organization-wide framework for establishing and maintaining a security culture. The revision of the standard in 2022 introduces enhanced requirements for areas such as cyber security, physical access control, internal governance and threat detection. It also optimizes the structure of security controls and adds new topics such as threat intelligence, cloud security, data masking and secure software development. By adapting to these updates, reev is demonstrating that its processes and systems are designed to meet today’s ever-evolving security challenges.

Obtaining certification requires more than a one-off audit. A company must undergo a thorough, independent assessment of its policies, processes and technologies. Once certified, it undergoes annual surveillance audits to ensure ongoing compliance, with full recertification required every three years. This ensures that the ISMS remains effective and is continuously improved over time.

Why this is important for reev customers

ISO certification means concrete benefits for our customers. Sensitive information such as billing data, user identities and access controls are managed according to internationally recognized security practices. Certification also supports compliance with the General Data Protection Regulation (GDPR) and other European data protection laws, providing customers with additional assurance that their privacy is respected and protected.
It also means that the risks associated with operating a connected charging infrastructure are continuously identified, monitored and mitigated. Our ISMS ensures that the reev Platform remains resilient in the face of new cyber threats or potential outages. As ISO 27001 requires an organization to regularly review and refine its processes, our security measures evolve as new technologies and risks emerge. In practice, this results in a more reliable and future-proof service for every user.

Security in practice at reev

The certification reflects how security is implemented in day-to-day operations at reev. Access rights within the reev platform are role-based so that only authorized persons can make changes to sensitive systems. All data is encrypted both at rest and in transit. Our systems are continuously monitored and supported by incident response and disaster recovery procedures to ensure rapid response to disruptions. Even third-party hardware integrations are subject to the same ISO-based security standards, creating a consistent level of protection across the ecosystem.

Acting in the interests of our customers

“We are very proud to announce our ISO certification today. It underscores our long-standing commitment to maintaining industry-leading data privacy and security standards. This certification provides additional assurance to our valued customers when evaluating the quality, breadth and strength of our security practices,” said Alex Di Mango, CTO at reev.

What this means for our customers

Nothing changes for our customers and partners in terms of required measures. The certification applies to all our services and integrations, and the benefits are automatically available. What does change is the added level of security: when you work with reev, you can rest assured that your data and your business are protected to the highest international standards – and that our practices will evolve to meet the challenges of tomorrow.