All Services
Regulatory Compliance

Certification without surprises
in the audit

From assessment to audit, with the path set by what triggered the project: a legal obligation, a certification or a customer requirement. More than 50 certifications completed with Lead Auditor specialists.

Free Assessment Talk To Us
50+ certifications delivered 100% audit pass rate ISO 27001 in avg 8 months
50+
Certifications delivered
100%
Audit pass rate
8m
Avg ISO 27001 timeline
5d
For gap analysis
Scope

Which framework fits
your goal?

We work with the main frameworks and regulations in Brazil and abroad. The assessment shows which one answers your goal.

ISO 27001
ISO 27001:2022
Information Security Management System. The most recognized security certification globally.
Official page: ISO
PCI DSS
PCI DSS v4.0.1
Mandatory for companies that process, store or transmit credit card data.
Official page: PCI Security Standards Council
LGPD
Lei 13.709/2018
Brazilian General Data Protection Law. Applicable to all organizations that process personal data in Brazil.
Official page: Presidência da República (Planalto)
SOC 2
SOC 2 Type I & II
Required by US and international enterprise clients to prove security, availability and confidentiality controls.
Official page: AICPA
NIST
NIST CSF 2.0
Cybersecurity Framework for risk management and security posture improvement.
Official page: NIST
CIS
CIS Controls v8.1
Prioritized set of controls for reducing cyber attack exposure.
Official page: Center for Internet Security
BCB
CMN Res. 4,893 and BCB Res. 85
Cybersecurity policy, incident management and cloud contracting for institutions supervised by the Brazilian Central Bank.
Official page: Banco Central do Brasil
TISAX
TISAX (VDA ISA 6)
Security assessment that European carmakers require from suppliers in the automotive chain.
Official page: ENX Association
Before the scope

Each goal calls for its own path

Meeting Brazilian Central Bank (BCB) rules, earning ISO 27001 to win more deals and answering a customer's security questionnaire start from different places. The assessment defines the framework, scope and deliverable that make sense.

Legal or regulatory obligation
LGPD, BCB resolutions and sector rules. The work follows the text of the rule and produces the documents and reports supervisors will ask for.
Certification
ISO 27001, PCI DSS, SOC 2 or TISAX. The management system scope covers what the business needs to certify, without inflating the project.
Customer requirement
When the request comes from a contract, certification isn't always necessary. Sometimes a compliance report or a SOC 2 Type I does the job, and we say so before proposing something bigger.
Independent from certifiers and tools

We prepare the company and support it through the audit, but we are not the certification body and we don't sell compliance software. So the recommendation considers only what your goal requires.

Our methodology

From analysis to certificate,
step by step

Methodology proven in over 50 certifications. No surprises in the audit.

Gap Analysis
5 business days
Full assessment of current state versus framework requirements. Remediation plan with priority and effort.
Implementation Plan
1 week
Implementation schedule with defined owners, resources and deadlines for each control.
Controls Implementation
2 to 4 months
We support the implementation of each control, from written policies to technical settings.
Audit Preparation
2 to 3 weeks
Internal audit simulation to identify residual gaps and prepare all evidence documentation.
Audit & Certification
1 week
We are present during the external audit. Certified Lead Auditor by your side throughout.
Ongoing Maintenance
Annual
After certification, we maintain controls and prepare for annual surveillance audits.

Where should you start
in your case?

Tell us what triggered the project. Within 48h you get a free initial assessment with the recommended path.

Free Assessment WhatsApp
✓ Free assessment · Proposal in 48h · No commitment
Sources and references

Figures without a listed source, such as environments tested, certifications delivered, satisfaction and case results, come from IONICZ projects. Links checked in October 2026.