Book a consultation

Certificationsand standards

We separate certifications we hold today from work genuinely underway and frameworks we build to but don’t hold formal certification against, so a procurement team can see exactly where we stand, and check it themselves.

Request the evidence pack

Certifications

Each credential with its status, the record to check it against, and the date it was last reviewed.

  • Cyber EssentialsAchieved

    Cyber EssentialsIssued to Orion Data Analytics Ltd, now Talastron Ltd

    Talastron is certified under the UK government-backed Cyber Essentials scheme, demonstrating baseline controls against common cyber threats.

    Record
    Blockmark registry
    Reviewed
    5 June 2026
  • Achieved

    Microsoft PartnerPartner ID 7100919

    Recognised Microsoft partner status, the foundation of our delivery relationship with Microsoft.

    Record
    On request
    Reviewed
    5 June 2026
  • Achieved

    ISV Success ProgramMicrosoft

    Our route to publishing Talastron Kinetic AI on Azure Marketplace.

    Record
    Enrolment record, on request
    Reviewed
    22 May 2026
  • ICO, Information Commissioner’s OfficeAchieved

    ICO registrationZB804967

    Registered with the Information Commissioner’s Office as a data controller.

    Record
    ICO register
    Reviewed
    5 June 2026
  • Armed Forces CovenantAchieved

    Armed Forces CovenantSignatory

    A pledge to treat those who serve, or have served, with fairness and respect.

    Record
    gov.uk record
    Reviewed
    5 June 2026
  • In progress

    ISO/IEC 27001For the Talastron Kinetic AI delivery pipeline

    Talastron is actively pursuing ISO/IEC 27001 certification for Talastron Kinetic AI’s delivery pipeline.

    Record
    None until issued
    Reviewed
    7 September 2026
  • In progress

    Microsoft Solutions Partner – Data & AIData & AI designation

    Recognises specialised capability delivering Data & AI solutions on the Microsoft platform. We hold Microsoft Partner status today and are completing the additional requirements for this designation. We’ll update this page the day it’s achieved, not before.

Compliancescope acrossevery tier

Alongside our certifications, engagements are architected to the standards below. These are design commitments, not certifications we hold. We’re explicit about the difference.

Defence &public sector

For the full classification-standards list and named defence specialists, see our dedicated Defence practice.
  • CNICritical National Infrastructure delivery patterns
  • OFFICIAL-SENSITIVEUK Government security classification tier
  • SECRETHigher-tier UK Government classification
  • JSPJoint Service Publication defence standards

Security

In alignment with Microsoft’s security standards and the Microsoft Cloud Security Benchmark, we implement comprehensive technical and organisational measures to protect your data from unauthorised access or manipulation.

UK SouthOur primary data residency is within the United Kingdom (UK South region).

  1. 01

    The edge

    • Cloudflare Web Application Firewall (WAF) and DDoS protection for our public-facing web infrastructure.

  2. 02

    Identity

    • Multi-factor authentication (MFA) enforced across all administrative and user accounts via Microsoft Entra ID Conditional Access policies.
    • Role-based access control (RBAC) ensuring that access to personal data is limited to authorised personnel with a legitimate business need.

  3. 03

    Operations

    • Continuous security monitoring through Microsoft Defender for Cloud, with automated threat detection and incident alerting.
    • Regular security assessments, vulnerability scanning and penetration testing of our infrastructure.
    • Secure development practices aligned with the Microsoft Security Development Lifecycle (SDL) and OWASP guidelines.
    • A minimum Partner Centre Security Score of 80 or above, maintained and monitored as part of our ongoing Microsoft partnership compliance.

  4. 04

    Your data

    • Advanced encryption for data at rest (AES-256) and data in transit (TLS 1.2 or higher) across all systems and communications.
    • Data loss prevention (DLP) policies applied across Microsoft 365 to prevent unauthorised data exfiltration.

Privacy

We share your personal data only with trusted service providers who process data on our behalf under appropriate contractual safeguards, including data processing agreements. We do not sell your personal information to any third party.

ProcessorWhat it does for us
CloudflareOur website is hosted and protected by Cloudflare, which also measures how it is used (Cloudflare Web Analytics, without cookies) and checks that our forms are sent by people (Cloudflare Turnstile).
MicrosoftEnquiries sent through the form on our Website are delivered by email to our Microsoft 365 mailbox and recorded in a Microsoft SharePoint list in our own Microsoft 365 tenant; they are not passed to any other party.
ResendWe use Resend to send our Insights newsletter.

Privacy Policy

How we collect, use, and protect your personal information.

Cookie Policy

How we use cookies and tracking technologies on our website.

Modern Slavery Statement

Our commitment to preventing modern slavery and human trafficking in our business and supply chains.

Disclaimer

Important information about the use of our website and services.

Buying fromTalastron

Company
Talastron Ltd, registered in England and Wales
Registered office
The Long Barn, Cobham Park Road
Cobham, Surrey KT11 3NE
Formerly
Orion Data Analytics Ltd
  • 15464691Company number
  • 463 5874 58VAT number
  • 7100919Microsoft Partner ID
  • ZB804967ICO registration

Need the fullevidence pack?

We’ll share certificates, scope statements and audit references directly with your procurement team.

Request the evidence packGovern & Secure