Skip to content
Log in
VetBis
Try free

ISO/IEC 27001

ISO/IEC 27001 and the information security management system

An ISO/IEC 27001:2022 certificate was issued by BELCERT for the software development activity of MTY, the company that builds VetBis; it does not indicate current validity. The validity date on the certificate (28.01.2026) has passed and a renewed certificate has not been published, so we show the certificate as it is, with its dates. See also our data security practices and the trust centre.

A cold aisle between tidy, cabled server racks

Certificate card

Validity date passed · renewed certificate not published
Standard
ISO/IEC 27001:2022 · Information Security Management System
Certificate no.
A1576149
Certification body
BELCERT International Certification Company
Name on the certificate
MTY Marka Tasarla Yazılım ve Otomasyon Hizmetleri San. Tic. Ltd. Şti. (as printed)
Scope
Computer programming activities: coding of system, database, network and web software and customer-specific software
Issue date
28.01.2025
Validity date on the certificate
28.01.2026

The name on the certificate differs from MTY Teknoloji A.Ş., the company that builds VetBis. The certificate belongs to the software development activity; it is not a separate certification of the VetBis product or its hosting infrastructure.

The certificate's registry status can be checked at belcert.com.

Not a product feature, a management cycle that keeps running

ISO/IEC 27001 is a management system standard. It does not ask for one technical protection; it asks for a cycle in which information security is planned, applied, measured and improved. The four steps below are the cycle the standard requires.

1234

  1. 1Plan

    Scope, information assets and risks are identified, and the controls to apply are decided.

  2. 2Do

    The chosen controls are operated: access management, record keeping, supplier and incident management.

  3. 3Check

    Internal audit and management review measure whether the controls work.

  4. 4Act

    Findings become corrective actions; a surveillance audit tests the cycle once a year.

Two colleagues reviewing printed documents that are blurred and unreadable
Illustrative image.
A locked server cabinet with a door access reader
Illustrative image.

Controls and the limit of the certificate

In the 2022 edition of the standard, Annex A groups 93 controls into four themes: organisational, people, physical and technological. The certificate shows that a management system within this framework is operated and has been audited by an independent body.

What the certificate says

  • An information security management system has been set up for the software development activity.
  • This system was audited by an independent certification body.
  • The certificate was issued on 28.01.2025 and carries a one-year validity date.

What it does not say

  • It does not say the infrastructure that hosts VetBis is separately ISO 27001 certified.
  • There is no certificate for KVKK; compliance is a legal obligation and is explained separately.
  • It does not mean a penetration test was passed or that no vulnerability exists.
  • It does not show a current certificate today; until a renewed certificate is published it is not treated as current on this page.

To ask about the current certificate status, write to the support team.