The audit
Filum.ai's Information Security Management System was built and operated against the requirements of ISO/IEC 27001:2022, with a Statement of Applicability (Version 1.0) issued on 24 June 2026. The certification audit was conducted on 5 August 2026, and the certification decision was issued on 1 September 2026.
The certificate runs for three years and carries a maintenance programme: a first surveillance audit in September 2027, a second in September 2028, and a recertification audit in June 2029. Continued validity depends on the outcome of those audits.
Scope and controls assessed
The scope covers the development and provision of customer experience management and customer service software — that is, the whole platform our enterprise customers run on. The controls assessed include:
- Information security policy and the allocation of responsibilities across the organisation
- Role-based access provisioning, with periodic review
- Classification, storage, transmission and disposal of customer data
- Detection, reporting and handling of information security incidents
- Security in infrastructure operations and across the software development lifecycle
- Risk management for suppliers and third parties
- Business continuity
Why it matters for enterprise customers
Filum.ai supplies an AI Workforce that handles customer conversations and customer data directly. For that class of buyer, model capability is only part of the vendor decision; the rest is how data is accessed, stored and protected, and who is accountable when something goes wrong.
ISO/IEC 27001:2022 provides an independently verified answer to that second half. In practice it also shortens vendor due diligence and security questionnaires — usually the slowest steps in an enterprise procurement cycle.
Verification
The certificate was issued by Sustainable Management Group (SMG, Canada). SMG is accredited by the International Accreditation Service (IAS) and is a signatory to the IAF Multilateral Recognition Arrangement, so the certificate carries international recognition. The audit in Vietnam was carried out by DAS Vietnam.
The current status of certificate VN-10121-ISMS can be checked directly on SMG's public register at smg-aw.com/filum-one-member-company-limited. We encourage procurement and security teams to verify it there rather than rely on documents we supply.
About Filum.ai
Filum.ai builds an AI-native operating system for the enterprise, where people direct and an AI Workforce executes. The platform provides AI Agents that resolve the majority of customer service interactions for brands across Vietnam and Southeast Asia, running on their real customer data.
