Certifications and assurance
Trucell publishes its certifications in one place so procurement, risk, and clinical governance teams can confirm scope without back and forth. Our headline certification is ISO 27001:2022, with scope covering managed IT services, cybersecurity services, and medical imaging IT including PACS/DICOM administration and the DICOMJet platform. ISO 9001 covers our quality management system; Microsoft Cloud Solutions Provider, ITAR/AUKUS Australian Authorized User registration, and vendor partner credentials sit alongside.
Headline certification
ISO 27001:2022 Information Security Management System
Issued by Citation Certification Pty Ltd (JAS-ANZ accredited). Certificate 500-27285-IS, valid from 11 May 2026 to 10 May 2029.
Scope of certification
The provision of managed IT services, cybersecurity services and medical imaging IT services (including PACS/DICOM administration and the DICOMJet platform) including all internal corporate systems, remote access environments, cloud tenancies (Microsoft 365 / Azure / Entra ID) and the management of third-party supplier relationships. SOA revision 1.1, effective 02-04-2026.
- Certified entity
- Trucell Pty Ltd
- Certificate number
- 500-27285-IS
- Original certification date
- 11 May 2026
- Statement of Applicability
- Revision 1.1, effective 2 April 2026
Service organization controls
SOC 2 Type II
Trucell holds an annual SOC 2 Type II attestation report covering security controls across the service delivery environment. The report is available to clients and prospects under NDA as part of vendor risk reviews.
Trust Services Criteria covered: Security. SOC 2 Type II is a CPA attestation report, not a certification; the report itself (rather than a registry) is the verifiable artefact.
Quality management
ISO 9001 Quality Management System
Trucell holds an ISO 9001 quality management system covering the same delivery scope as our managed IT, security, and medical imaging services. ISO 9001 is the foundation our service desk, change control, project delivery, and customer feedback loops are built on. Certified entity: Trucell Pty Ltd.
Cloud partner
Microsoft Cloud Solutions Provider (CSP)
Trucell is a Microsoft Cloud Solutions Provider, transacting and supporting Microsoft 365, Azure, Entra ID, and adjacent Microsoft cloud services for Australian organisations under the CSP program.
Defence and export controls
ITAR/AUKUS Australian Authorized User
Trucell is enrolled as an Australian Authorized User under the United States International Traffic in Arms Regulations (ITAR) section 126.7, granting access to the Licence Free Environment within the AUKUS framework. AUKUS registration number AUK0001996. See our enrolment write-up for the operational implications.
Vendor credentials
Vendor partner credentials
These are vendor-issued credentials we hold for the platforms we deploy and operate. They sit alongside the audited ISO certifications above; they are not equivalent to a third-party-audited management system.
-
Microsoft Cloud Solutions Provider (CSP)
Trucell transacts and supports Microsoft 365, Azure, Entra ID, and adjacent Microsoft cloud services for Australian organisations under the Microsoft CSP program.
-
NVIDIA Partner Network
Trucell is a registered member of the NVIDIA Partner Network, with NVIDIA-accelerated workloads (including ClariRad QA) deployed on customer-managed GPU infrastructure or Trucell-managed colocation.
-
Fortinet Gold Partner
Fortinet Gold Partner: deployment, installation and auditing, ongoing support and NOC services, FortiManager and FortiAnalyzer operations, and Wi-Fi planning across Australian client estates.
-
SentinelOne Certified
SentinelOne Singularity XDR: deployed and tuned as part of Trucell managed security services for organisations standardising on SentinelOne for endpoint detection and response.
-
3CX Silver Partner
3CX Silver Partner: voice and unified communications platforms deployed on premises or in cloud patterns under client control, with Trucell handling upgrades and break-fix.