Certificationsand standards

We separate certifications we hold today from work genuinely underway and frameworks we build to but don’t hold formal certification against, so a procurement team can see exactly where we stand, and check it themselves.

Certifications

Each credential with its status, the record to check it against, and the date it was last reviewed.

  • Cyber EssentialsAchieved

    Cyber EssentialsIssued to Orion Data Analytics Ltd, now Talastron Ltd

    Talastron is certified under the UK government-backed Cyber Essentials scheme, demonstrating baseline controls against common cyber threats.

    Record
    Blockmark registry
    Reviewed
    5 June 2026
  • Achieved

    Microsoft PartnerPartner ID 7100919

    Recognised Microsoft partner status, the foundation of our delivery relationship with Microsoft.

    Record
    On request
    Reviewed
    5 June 2026
  • Achieved

    ISV Success ProgramMicrosoft

    Our route to publishing Talastron Kinetic AI on Azure Marketplace.

    Record
    Enrolment record, on request
    Reviewed
    22 May 2026
  • ICO, Information Commissioner’s OfficeAchieved

    ICO registrationZB804967

    Registered with the Information Commissioner’s Office as a data controller.

    Record
    ICO register
    Reviewed
    5 June 2026
  • Armed Forces CovenantAchieved

    Armed Forces CovenantSignatory

    A pledge to treat those who serve, or have served, with fairness and respect.

    Record
    gov.uk record
    Reviewed
    5 June 2026
  • In progress

    ISO/IEC 27001For the Talastron Kinetic AI delivery pipeline

    Talastron is actively pursuing ISO/IEC 27001 certification for Talastron Kinetic AI’s delivery pipeline.

    Record
    None until issued
    Reviewed
    7 September 2026
  • In progress

    Microsoft Solutions Partner – Data & AIData & AI designation

    Recognises specialised capability delivering Data & AI solutions on the Microsoft platform. We hold Microsoft Partner status today and are completing the additional requirements for this designation. We will update this page on the day it is achieved.

Compliancescope acrossevery tier

Alongside our certifications, engagements are architected to the standards below. These are design commitments. The certifications we hold are listed above.

Defence &public sector

For the full classification-standards list and named defence specialists, see our dedicated Defence practice.

  • CNICritical National Infrastructure delivery patterns
  • OFFICIAL-SENSITIVEUK Government security classification tier
  • SECRETHigher-tier UK Government classification
  • JSPJoint Service Publication defence standards

Security

In alignment with Microsoft’s security standards and the Microsoft Cloud Security Benchmark, we implement comprehensive technical and organisational measures to protect your data from unauthorised access or manipulation.

UK SouthOur primary data residency is within the United Kingdom (UK South region).

  1. 01

    The edge

    • Cloudflare Web Application Firewall (WAF) and DDoS protection for our public-facing web infrastructure.
  2. 02

    Identity

    • Multi-factor authentication (MFA) enforced across all administrative and user accounts via Microsoft Entra ID Conditional Access policies.
    • Role-based access control (RBAC) ensuring that access to personal data is limited to authorised personnel with a legitimate business need.
  3. 03

    Operations

    • Continuous security monitoring through Microsoft Defender for Cloud, with automated threat detection and incident alerting.
    • Secure development practices aligned with the Microsoft Security Development Lifecycle (SDL) and OWASP guidelines.
  4. 04

    Your data

    • Advanced encryption for data at rest (AES-256) and data in transit (TLS 1.2 or higher) across all systems and communications.
    • Data loss prevention (DLP) policies applied across Microsoft 365 to prevent unauthorised data exfiltration.

How agent actionsare governed

These are design commitments for every agent we build that can change a system in your business.

  1. 01The agent proposes

    An agent can only use actions we have defined and you have approved.

  2. 02Your thresholds apply

    Anything above the limits you set waits for a person.

  3. 03A named person signs off

    A verified person on your side approves or declines.

  4. 04Everything is recorded

    Every proposal, approval and change is recorded in your own tenant.

Privacy

We share your personal data only with trusted service providers who process data on our behalf under appropriate contractual safeguards, including data processing agreements. We do not sell your personal information to any third party.

  • Cloudflare

    Our website is hosted and protected by Cloudflare, which also measures how it is used (Cloudflare Web Analytics, without cookies) and checks that our forms are sent by people (Cloudflare Turnstile).

  • Microsoft

    Enquiries sent through the form on our Website are recorded in a Microsoft SharePoint list in our own Microsoft 365 tenant, and we receive an email notice that holds none of your details; they are not passed to any other party.

  • Resend

    We use Resend to send our Insights newsletter.

Buying fromTalastron

Company
Talastron Ltd, registered in England and Wales
Registered office
The Long Barn, Cobham Park Road
Cobham, Surrey KT11 3NE
Formerly
Orion Data Analytics Ltd
  • 15464691Company number
  • 463 5874 58VAT number
  • 7100919Microsoft Partner ID
  • ZB804967ICO registration

Need the fullevidence pack?

We’ll share certificates, scope statements and audit references directly with your procurement team.