Trivore’s 25-year journey from a small IT shop to a pioneer in identity management has always been based on quality and pragmatism. Now we have reached another major milestone on this journey: Trivore has been awarded the international ISO 27001:2022 security certification..
We interviewed Trivore’s founder Kari Mattsson about what the certification process taught the company and what it means for customers.
Seven-year squeeze
Towards the end of January 2026, a message that had been a long time in the making hit Trivore’s internal messaging channel. “Here it is. Issued the day before yesterday. ISO 27001:2022 certificate. Gridding 2019-2026. Other things take time. Usually the best things take time, even a surprisingly long time. The work continues.” Kari wrote to the team.
The message sums up the philosophy of Kari and Trivore: quality is not created in haste. We interviewed Kari about the certification process and the importance of certification for Trivore and its customers. Below is a summary of the interview.
Kari, you said in your post that “usually the best things take time”. Why did this certification process take so long?
“We’ve always had a kind of potter’s approach to what we do – shaping things until they’re right first time. For us, ISO 27001 is not just a piece of paper on the wall, it has been a journey of honing our processes to world-class standards,” Kari reflects.
“We started building this foundation years ago with the ISO 9001 quality certification. However, information security is at the heart of identity management (IAM), and we wanted to make sure that our management system (ISMS) was really part of what we do every day, not just a layer glued on top.”
You are known for your deep passion for security and smart processes. What does ISO 27001:2022 mean in technical terms for Trivore’s eIAM solution?
“It is a confirmation of the incredibly strong foundation we have built on. The latest 2022 version of the standard puts even more emphasis on continuous risk management and cyber security. Our eIAM solution is based on Zero Trust principles, and the certification shows that our governance processes also support this technical promise: the right people have access to the right information at the right time, and this process is audited and secure.”
Customers such as HSL and Waltti manage huge numbers of users. How do they benefit from this certificate?
“For the customer, this means above all peace of mind and easier proof of compliance. When we take care of the foundation according to international standards, the customer can focus on their business, confident that their data is protected,” Kari explains.
“It’s about trust. When we operate in critical environments, such as partnering with Traficom or major public transport operators, independent confirmation of security is a must.”
Were other actors involved in the process?
“The process was carried out in close cooperation with a Finnish cybersecurity expert Into Security Into Security. The cooperation worked well and Tatu Suhonen, Into Security’s Business Director, was very enthusiastic to praise us and said:”
“Trivore’s commitment to continuous improvement in security has been exemplary. The certification process demonstrated that the company has a deep understanding of security and the ability to manage even the most complex issues in a controlled and transparent manner.”
Your message to the team ended with the words “work continues”. What does that mean in practice?
“The certificate is not an end point, but a new beginning. Security is an ongoing process – it is never finished. On International Data Protection Day on 28 January, I will open up more on this in our internal training session,” Kari reveals.
“In the future, artificial intelligence and machine learning will bring new opportunities, but also new threats. We must be ready to help our customers meet the challenges of the future. We will continue to work to provide secure and scalable solutions for decades to come.”