generated: '2026-09-07'
method: searched
source: https://www.adastec.com/announcements/adastec-receives-iso-certifications
scope: >-
  Corporate management-system certifications ADASTEC publishes on its own site. No API-contract
  conformance (OAuth2/OIDC, JSON:API, RFC 9457, pagination, idempotency, OData, SCIM) could be
  asserted or refuted: ADASTEC publishes no OpenAPI, AsyncAPI, GraphQL SDL or API reference, so
  there is no contract to read. Those checks are recorded as unknown rather than false.
note: >-
  These are ISO management-system certifications for the company, not conformance of an API
  contract to a standard. They are recorded because the provider published them with named
  standards and a named certification body, which is what compliance_published reads. Dates are
  as stated in the 2021-03-31 announcement; no renewal or surveillance-audit status is published,
  and the ISO 27001:2013 edition named there has since been superseded by ISO/IEC 27001:2022.
certification_body: PC Certification
conformance:
- id: iso-9001-2015
  name: ISO 9001:2015 Quality Management System
  conforms: true
  evidence: https://www.adastec.com/announcements/adastec-receives-iso-certifications
- id: iso-45001-2018
  name: ISO 45001:2018 Occupational Health and Safety Management System
  conforms: true
  evidence: https://www.adastec.com/announcements/adastec-receives-iso-certifications
- id: iso-14001-2015
  name: ISO 14001:2015 Environmental Management System
  conforms: true
  evidence: https://www.adastec.com/announcements/adastec-receives-iso-certifications
- id: iso-27001-2013
  name: ISO/IEC 27001:2013 Information Security Management System
  conforms: true
  evidence: https://www.adastec.com/announcements/adastec-receives-iso-certifications
  supporting_document: >-
    https://cdn.prod.website-files.com/600ad06ae00a6210fd3a2752/6526ab4ea2732eb92792df3a_POL.01%20BGYS%20Politikalar%C4%B1.pdf
  supporting_document_note: >-
    "BGYS Politikaları" — the company's published Information Security Management System policy
    set, in Turkish, linked from the site footer.
- id: iso-26000-2010
  name: ISO 26000:2010 Social Responsibility guidance
  conforms: true
  evidence: https://www.adastec.com/announcements/adastec-receives-iso-certifications
- id: iso-10002
  name: ISO 10002 Customer Satisfaction / Complaints Management
  conforms: true
  evidence: https://www.adastec.com/announcements/adastec-receives-iso-certifications
- id: kvkk
  name: KVKK (Turkish Personal Data Protection Law) data-subject program
  conforms: true
  evidence: https://www.adastec.com/company-docs
  note: >-
    ADASTEC publishes a KVKK data-management-system policy, cookie policy, website disclosure
    text and a data-subject application form (Başvuru Formu) as downloadable documents.
domain_standards:
- id: none-assessable
  conforms: false
  evidence: https://www.adastec.com/flowride-ai
  note: >-
    The automated-transit market does have candidate interchange standards (GTFS / GTFS-Realtime,
    SIRI, NeTEx, TransModel, SAE J3016 operational-design-domain reporting, ISO 26262 / ISO 21448).
    ADASTEC names none of them in a published contract, and no contract is published, so no
    domain-standard signature can be read. Reward-only check: recorded as not evidenced, not as
    a failure.
unknown:
- id: oauth2
  reason: no published contract or auth documentation to read
- id: rfc9457
  reason: no published contract or error reference to read
- id: pagination
  reason: no published contract to read
- id: idempotency
  reason: no published contract to read