Recognition
Every credential, with the number you need to check it.
Five entries on public registers. Each one carries its issuing body, its reference number and the register you can read it in.
The check sheet
- ISO/IEC 27001:2022
- 27274
- ISO 9001:2015
- 27274
- IBM Gold Partner
- 8294
- UK Crown Commercial G-Cloud 14
- 721548
- UK Companies House
- 14444817
Four registers, roughly ten minutes. Both ISO certifications sit under one certificate number.
Verifiable, not asserted
Five credentials, and where each one is registered
The fourth column is the one worth reading: it states where each credential stops.
| Credential | Issuer and reference | Covers | Does not cover |
|---|---|---|---|
| ISO/IEC 27001:2022 | ISOQAR Limited, UKAS-accredited Certification Body 0026 Certificate 27274 Verify → | The MaxIron information security management system for the delivery of IBM Maximo services and MaxIron Cloud. The Statement of Applicability addresses all 93 Annex A controls. | Your own Maximo environment, which sits under the shared responsibility model published on the Trust Centre. SOC 2 and penetration test reports are separate instruments. |
| ISO 9001:2015 | ISOQAR Limited, UKAS-accredited Certification Body 0026 Certificate 27274 Verify → | How MaxIron plans, reviews and corrects work across the design and delivery of IBM Maximo services and MaxIron Cloud. Held under the same certificate number as ISO/IEC 27001:2022. | Programme outcomes, price and commercial terms. A certificate records a pass against the standard, with no rating, score or ranking attached. |
| IBM Gold Partner | IBM, Partner Plus directory Company 8294 Verify → | MaxIron listed as IBM Service Provider, ISV, SI, MSP and MSSP for IBM Maximo Application Suite, with reseller authorisation for MAS licensing. | Delivery on your estate, which is audited under the two certifications above. A partner tier records the commercial relationship with IBM. |
| UK Crown Commercial G-Cloud 14 | Crown Commercial Service, Digital Marketplace Supplier 721548 Verify → | A buying route. A UK public-sector body can call off MaxIron services under framework terms, with the service definitions, terms and pricing published in full. | Delivery quality. Suppliers on the framework are neither compared nor ranked, so the listing confers no position relative to others on it. |
| UK Companies House | UK Government, Companies House Company 14444817 Verify → | MaxIron Ltd as the legal entity you would contract with, together with its directors, registered office and filing history. | Financial health, credit rating and solvency, which your finance team assesses separately. |
Verification
Check the whole set in about ten minutes
Four registers, in the order a procurement or risk reader takes them. No form, no call, no NDA.
| Ref | Register | What to confirm |
|---|---|---|
| V1 | ISOQAR certificate register | Certificate 27274 carries both ISO/IEC 27001:2022 and ISO 9001:2015. Read the scope statement, which is the part that says what was audited. |
| V2 | UKAS accreditation | The issuing body is ISOQAR Limited, Certification Body 0026. UKAS is an IAF MLA signatory, so the certificate is recognised alongside those accredited by ANAB, JAS-ANZ and DAkkS. |
| V3 | Digital Marketplace | MaxIron Ltd is supplier 721548 on G-Cloud 14. Download the service definition for the lot you intend to buy through. |
| V4 | IBM Partner Plus directory | Company 8294, and the roles listed against IBM Maximo Application Suite. |
| V5 | Companies House | Company 14444817 for the legal entity, the directors and the filing history. |
Codes V1 to V5 are stable, so a reviewer can cite one by reference. Where a line on this page and the register disagree, the register is right.
Two instruments in one bid pack
What a certification establishes, and what a framework listing establishes
An accredited certification
ISO/IEC 27001:2022 and ISO 9001:2015, issued by ISOQAR under certificate 27274.
A framework listing
UK G-Cloud 14, MaxIron Ltd as supplier 721548 on the Digital Marketplace.
Who assessed what
An accredited body audited a management system against a published standard and issued a certificate with a scope statement.
A government buying organisation accepted a submission of services, terms and pricing onto a framework.
What it lets you rely on
Documented practice that an accredited body has tested, and retests at surveillance audit.
A route to purchase, under call-off terms set by Crown Commercial Service.
How you check it
ISOQAR certificate register, certificate 27274.
Digital Marketplace supplier page, supplier 721548.
Absences
Four deliberate absences from the list above
The exclusions are as considered as the entries.
Awards
MaxIron displays no award badge, and treats a paid directory placement or a sponsored listing as advertising rather than recognition.
Satisfaction scores
No Net Promoter Score, satisfaction percentage, client count or retention figure. We run no survey that would survive an audit, so there is no figure to quote.
Analyst and review listings
A Verdantix briefing and profiles on G2, Gartner Peer Insights and TrustRadius are in preparation. Each appears here on the day the source publishes it.
Standards MaxIron does not hold
This list is complete, so treat any standard absent from it as one we do not hold, and ask for the position in writing. The cloud platforms we build on hold their own certifications, listed by sub-processor on the Trust Centre.
Published without a request
Three documents procurement usually has to ask for
- Carbon Reduction Plan
- Published to the UK Government Procurement Policy Note 006 Technical Standard, with a 2025 baseline and a commitment to net zero by 2050. Read the plan.
- Accessibility statement
- maxiron.com and the MaxIron Portal target WCAG 2.2 Level AA, with the reporting route and the response commitment stated on the page. Read the statement.
- Trust Centre
- Certification status, the sub-processor list with regions, incident classification, business continuity, the security contact and the quarterly Trust Report. Open the Trust Centre.
Credentials and verification, questions we are asked
- How do I verify the ISO certifications?
- Search certificate number 27274 in the ISOQAR certificate checker. ISO/IEC 27001:2022 and ISO 9001:2015 are held under that one number, issued by ISOQAR Limited, UKAS-accredited Certification Body 0026. Read the scope statement as well as the status.
- Does the G-Cloud 14 listing mean the UK government endorses MaxIron?
- A G-Cloud listing is a route to purchase: a UK public-sector body can call off MaxIron services under framework terms without running its own tender. Crown Commercial Service sets those terms, and MaxIron Ltd is supplier 721548 on the Digital Marketplace.
- Can we see the certificate and the Statement of Applicability?
- Current certificates are shared on request to office@maxiron.com. Customers under NDA can also request the ISMS Statement of Applicability, which addresses all 93 Annex A controls.
- Does a MaxIron certification cover our Maximo environment?
- It covers MaxIron management systems within the certified scope. Your environment sits under a documented shared responsibility model on the Trust Centre, where MaxIron manages identity, patching, encryption, network configuration, monitoring and backup within the customer layer.
Send the supplier assurance pack.
We answer in writing against certificate 27274, supplier 721548 and the shared responsibility model on the Trust Centre, with any gaps named.
Bring this to the first exchange
- Your security questionnaire or supplier assurance pack, in your own format
- Your data processing agreement template, and any data residency constraint
- The G-Cloud 14 lot or contract vehicle you intend to buy through
- The standard your internal audit will test the supplier against