UK government-backed
Cyber Essentials
Basic protection against common cyber attacks.
- Firewalls
- Secure settings
- Access control
- Malware protection
- Software updates
Data quality · Standards
Our ISO certifications and industry memberships
We are certified to three ISO standards and to Cyber Essentials, and we are members of ESOMAR, the MRS and the AQR. This page says what each one covers, so your procurement and security teams can check us quickly.
ESOMARCorporate member
ISO9001 · 20252 · 27001- Cyber EssentialsCertified
MRSCompany Partner
MRS Awards 2025Sponsor
AQRMember
3ISO standards: 9001, 20252 and 27001
3research bodies we belong to: ESOMAR, the MRS and the AQR
2codes of conduct we work to
10+years in sampling and fieldwork
The problem
Buyers need proof, not adjectives
Every supplier says its data is good and its systems are safe. Procurement, legal and security teams need something they can check: a named standard, a certificate from an outside auditor, a code of conduct the supplier has signed up to. This page lists ours.
Certificates
Certifications
Each one is issued by an outside certification body: the ISO certificates after an audit, Cyber Essentials after an independent check of our self-assessment. Ask us for the numbers, scopes and expiry dates your supplier form needs.
- ISO9001:2015
ISO 9001:2015
Quality management
Quality management. Our ways of working are written down, measured and improved, and an outside certification body audits them.
Certificate details on request
- ISO20252:2019
ISO 20252:2019
Market, opinion and social research
The international standard for market, opinion and social research. It sets requirements for how research projects are planned, run, checked and reported.
Certificate details on request
- ISO27001:2022
ISO 27001:2022
Information security management
Information security management. Risks to the information we hold are assessed and controlled under a managed, audited system.
Certificate details on request
- Cyber Essentials
Cyber Essentials
Protection against common cyber attacks
A UK government-backed certification that covers basic protection against common cyber attacks: firewalls, secure settings, access control, malware protection and software updates.
Certificate details on request
Memberships
Memberships and industry bodies
The research bodies we belong to, and the codes of conduct we sign up to.
ESOMAR Corporate member
ESOMAR is the global association for data, research and insights. As members, we work to the ICC/ESOMAR International Code.
MRS Company Partner
The Market Research Society is the UK's professional body for research. As a Company Partner, we commit to the MRS Code of Conduct.
AQR
We are members of the Association for Qualitative Research, the UK body for qualitative researchers.
Sponsor
MRS Awards 2025
We sponsored the Applications & Impact of Data category at the MRS Awards 2025.
GDPR
Data protection
We are based in London and handle personal data in line with GDPR. Our GDPR & privacy page explains how.
GDPR & privacyCodes we work to
ICC/ESOMAR International CodeMRS Code of ConductExample
Example: answering a supplier questionnaire
A US retailer's procurement team sends a supplier questionnaire before a customer survey. It asks three things.
Quality. For how research quality is controlled, we point to ISO 20252 and ISO 9001.
Security. For how data is kept secure: ISO 27001, Cyber Essentials and our published ISMS policy.
Personal data. Our GDPR & privacy page answers the third. Then we send the certificate details the form asks for.
Supplier questionnaireResearch supplier review
- 1
How is research quality controlled?
ISO 20252ISO 9001 - 2
How is data kept secure?
ISO 27001Cyber EssentialsOur published ISMS policy - 3
How is personal data handled?
Our GDPR & privacy page
Then: the certificate numbers, scopes and expiry dates the form asks for.
Step by step
How to check us
- 01
Find the standard you need
Certificates for quality and information security are listed first, then the research bodies we belong to and the codes we follow.
See the certificates - 02
Ask for the details
Ask your Catalyse contact for the certificate numbers, scopes and expiry dates your supplier form needs.
Talk to sales - 03
Read our security policy
Our information security policy and objectives are published as a PDF.
Open the ISMS policy (PDF)
Two certificates, two jobs
Is Cyber Essentials the same as ISO 27001?
No. One checks five basic technical controls. The other is a full management system for information security.
Management system
ISO 27001:2022
Risks to the information we hold are assessed and controlled under a managed, audited system.
- Information security policies
- Risk assessment
- Controls across the organisation
- A managed system, audited from outside
We hold both.
FAQ
Questions, answered
What is ISO 20252?
It is the international standard for market, opinion and social research, including insights and data analytics. It sets out shared terms and service requirements for running research projects, from planning and fieldwork to reporting.
Is Cyber Essentials the same as ISO 27001?
No. Cyber Essentials checks five basic technical controls. ISO 27001 is a full management system for information security, covering policies, risk assessment and controls across the organisation. We hold both.
Which codes of conduct do you follow?
The ICC/ESOMAR International Code, as an ESOMAR member, and the MRS Code of Conduct, as an MRS Company Partner.
Can I get the certificate details for our supplier checks?
Ask your Catalyse contact, or use Talk to sales, and say which standards your review covers.
Related
Goes well with
Running a supplier review?
Tell us which standards and documents your team checks, and we will send what they need.
Offices: London (head office) · Orlando, FL · Gurgaon, Haryana