Krijyo Growth Solutions LLP has achieved ISO/IEC 27001:2022 certification. ISO/IEC 27001 is an international standard that sets requirements for an information security management system (ISMS): an organized approach to managing information security risks and continually improving how information is protected.
KriQy is a product of Krijyo Growth Solutions. This announcement concerns the certified organization's ISMS; it does not mean that KriQy has independently obtained a separate certificate.
Certification announcement
The certification details are:
- Certified organization: Krijyo Growth Solutions LLP
- Standard: ISO/IEC 27001:2022
- Certification provider: E Com Security Solutions
- Issue date: 14 October 2026
- Validity end date: 13 October 2029
- Certification scope: The Information Security Management System (ISMS) covers the provision of IT and IT-related services, including cloud-managed services and solutions.
What ISO/IEC 27001:2022 certification means
The standard addresses establishing, implementing, maintaining and continually improving an ISMS. Its focus is managing risks to the confidentiality, integrity and availability of information, rather than certifying a single software feature.
Certification should not be interpreted as a promise that security incidents cannot happen. It is not, by itself, a guarantee of complete security, employee anonymity or compliance with every applicable regulation.
Why information security matters for employee feedback
Employee feedback can include personal experiences, concerns about working relationships and sensitive workplace context. Responsible handling matters throughout the process, from collecting responses to reviewing findings and communicating what happens next.
People teams should understand who can access information, what can appropriately be shared and how employee expectations are explained. An aggregated finding and an individual comment can carry different identification risks, particularly in a small team. Certification does not remove the need to make careful decisions about those situations.
Employees also need clear information about how their data is handled. Avoid treating an information security certification as a substitute for explaining the privacy and anonymity arrangements of the particular feedback method being used.
What this milestone means for KriQy
KriQy helps organizations connect employee listening with action and visible follow-through. As a product of Krijyo Growth Solutions, it sits within the wider organizational context of this information security milestone.
The scope stated above covers the organization's provision of IT and IT-related services, including cloud-managed services and solutions. It should be read as written, not as a separate certification of every KriQy feature or a guarantee about a particular employee response.
When evaluating KriQy, review the service's security and privacy information alongside the certification details. Specific questions about your intended use, data handling or reporting should still be discussed directly.
Our continued commitment to information security
We see this certification as a milestone, not a finish line. Responsible information handling requires continued attention as services, workplace needs and risks change.
Our commitment is to keep information security part of the conversation about employee feedback, alongside clear communication and responsible follow-through. Organizations should be able to ask practical questions about how a service fits their needs without relying on a certification badge alone.
To learn more about KriQy's approach to employee listening and the wider feedback-to-action workflow, explore the platform or speak with our team.
Frequently asked questions
Which organization is ISO/IEC 27001:2022 certified?
Krijyo Growth Solutions LLP is the certified organization. KriQy is a product of Krijyo Growth Solutions, not a separately certified organization.
What does ISO/IEC 27001:2022 cover?
It sets requirements for an information security management system. The certification scope here covers the provision of IT and IT-related services, including cloud-managed services and solutions.
Who provided the certification, and what are its dates?
The certification provider is E Com Security Solutions. The issue date is 14 October 2026, and the validity end date is 13 October 2029.
Does certification guarantee that employee feedback is anonymous?
No. Anonymity depends on the particular feedback method, its configuration and how information is handled and reported. ISO/IEC 27001 certification does not guarantee anonymity or complete security.
Does certification guarantee regulatory compliance?
No. Organizations must still assess the legal and regulatory obligations relevant to their circumstances. Certification is not a blanket compliance guarantee.
Where can I learn more about KriQy's security and privacy?
Review the Security and Privacy pages linked in this article. Contact the KriQy team if you need clarification about your intended use or the certification scope.