Haarlem, October 30, 2026 – The CarWise Group has extended its ISO/IEC 27001 certification to its Haarlem location. The Almere location has been certified for about a year. Following the most recent audit by the certification body CIIO B.V., the certificate now covers both locations. It applies to information security in the development, implementation, and support of software solutions for leasing companies and car rental firms.
Sensitive data requires verifiable security
Leasing companies and car rental firms process business-critical and personal data in their software on a daily basis: contract and financial data, customer and driver information, as well as vehicle and billing data. If these systems fail or data is compromised, contract processing, billing, and customer relationships are directly affected.
As a result, customers and regulatory authorities are scrutinizing IT service providers’ information security practices more closely than ever. In requests for proposals and supplier evaluations, ISO 27001 is now considered the standard proof of compliance.
What’s Behind the Certification
ISO/IEC 27001 is the internationally recognized standard for information security management systems. It requires that risks be systematically identified, assessed, and addressed with appropriate measures. These include, for example, access control, encryption, secure software development, contingency planning, and incident response.
Over the course of the past year, the Haarlem location was integrated into the existing ISMS. During the audit, CIIO verified whether the standard’s requirements were being implemented in day-to-day operations there as well.
Our customers entrust us with processes that are critical to their business. With the expansion to Haarlem, both locations now operate according to the same, independently audited standards. We view this as a commitment to continuously improve our information security.
Ed Fhijnbeen, CEO of the CarWise Group
Certification is reviewed annually through surveillance audits. This ensures that the ISMS remains effective and continues to be developed at both locations.
