Milestone: ISAE 3000A Type II assurance report for Indicia
Indicia has obtained an ISAE 3000A Type II assurance report. This independent report under the International Standard on Assurance Engagements (ISAE) shows that Indicia's internal controls are demonstrably in order: in their design, their existence and the way they work in practice.
Even more certainty for clients
Indicia has obtained an ISAE 3000A Type II assurance report. This independent report under the International Standard on Assurance Engagements (ISAE) shows that Indicia's internal controls are demonstrably in order: in their design, their existence and the way they work in practice.
"The ISAE 3000A Type II report is a new milestone for Indicia," says Carlo Korssen, CEO of Indicia. "It confirms that we work together the right way and that our processes are mature, controlled and of high quality. That is essential for regulated sectors such as financial institutions and government, but just as much for organisations where security and continuity are business critical."
What does the ISAE 3000A Type II report cover?
"The report covers the entire production process behind our online software, application and data management solutions," explains Eric ten Wolde, Manager Managed Services at Indicia. "That means development and implementation as well as maintenance, hosting and our managed services processes all fall within the audited scope."
"We build on our ISO 27001 management system for information security, which has been our foundation for years. Clients can review the ISAE 3000A Type II report on request, subject to conditions."
"For us, quality is not a paper reality. It is daily practice."
What does the ISAE audit test?
An external ISAE auditor uses a control framework to examine how an organisation has set up its day-to-day processes and controls. Think information security and data processing. Not just on paper, but above all in daily practice.
The audit is not a snapshot. Indicia was audited over the period from 1 July 2025 to 31 December 2025. From now on there will be an audit every year, covering the full year.
A compliment from the auditor
The auditor was positive about Indicia. Korssen: "The auditor said we have organised our processes and our delivery at a remarkably high level compared with similar companies. That is a lovely compliment to all the colleagues who put the work in."
Ten Wolde adds: "That high level sits in the daily delivery. Our processes for changes, incidents and access management are not only documented, they are monitored continuously. So for us, quality is not a paper reality. It is daily practice."
What does this mean for Indicia's clients?
- Certainty about the quality of our processes; not just on paper, but independently demonstrated
- Insight into how Indicia works, from internal controls to the suppliers we use
- Directly usable as evidence for outsourcing and DORA compliance
- Fewer questions during your own audits, and more confidence
.webp%3F2026-09-03T08%253A51%253A34.106Z&w=3840&q=75)
.webp%3F2026-09-03T08%253A51%253A32.726Z&w=3840&q=75)
Take control of AI in your organisation
Contact
- Step 1
Send
You send your question or challenge through the form.
- Step 2
Reply
We reply within one working day with a first direction.
- Step 3
Plan
We schedule an introduction to take the next step together.
It means your data is protected systematically: against data leaks, cyber attacks and unauthorised access, demonstrably and structurally.
Yes. The NEN 7510 certification shows that Indicia handles sensitive healthcare data carefully, including data that falls under strict sector-specific rules.
The ISAE 3000A Type II report proves it. That is not a self-declaration but an independent audit, confirming that the way of working is not only well designed but also carried out that way.
Indicia builds and implements AI applications that comply with the EU AI Act, so your organisation can use AI safely, responsibly and compliantly.