Certification to ISO/IEC 27001:2022 and ISO/IEC 27701:2019

We’re proud to share that Prospect’s frameworks for managing information security and data privacy — formally known as its Information Security Management System (ISMS) and Privacy Information Management System (PIMS) — have been independently certified by global certification, inspection, and assurance company LRQA.

These systems are developed and managed by the Access to Energy Institute (A2EI), while the Prospect platform is developed by A2EI with the support of GET.invest.

For an open-source platform, this is a significant milestone — and an intentional one. Prospect is used to monitor and verify energy access data, often in partnership with organisations such as the World Bank and other larger organisations, where the sensitivity of the data — and the trust placed in how it’s handled — really matters.

These certifications mean Prospect’s information security practices and its handling of personal data meet internationally recognised standards, independently verified rather than self-declared.

Key benefits of ISO 27001 and ISO 27701 certification:
• Systematic management of security and privacy risks
• Stronger protection of confidential and personal information
• Clear accountability and effective information governance
• Greater trust among users, partners and funders
• Continuous improvement and preparedness for security incidents

They also reinforce a core principle behind Prospect: security and privacy are built in by design and strengthened by the transparency, accessibility and independent scrutiny that open-source software enables.

A big thank you to the whole Prospect team for the months of work behind this, and to LRQA for a thorough and collaborative audit process!