Allcontrols

BACKGROUND

Please describe your company and position.

I am the Head of Delivery Management of WebbyLab

Describe what your company does in a single sentence.

WebbyLab is a software engineering company specializing in fintech, payment systems, cloud solutions, and custom web application development, helping businesses build secure, scalable, and high-performance digital products.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• PCI DSS compliance assessment support
• Audit preparation and compliance validation for customer environments
• Security and compliance consulting for fintech/payment projects

SOLUTION

How did you find Allcontrols?

Online Search

Why did you select Allcontrols over others?

• Close to my geographic location
• Pricing fit our budget
• Good value for cost

How many teammates from Allcontrols were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Allcontrols supported PCI DSS-related compliance activities for fintech and payment projects delivered to our customers. The scope of work included compliance consulting, review of security and infrastructure controls, guidance regarding PCI DSS requirements applicability, participation in compliance discussions, and assistance during audit preparation activities.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The collaboration helped streamline PCI DSS-related compliance activities for customer projects and improved overall audit readiness. Allcontrols provided practical guidance regarding security controls and PCI DSS requirements interpretation, which helped reduce delays during compliance discussions and remediation activities. We had a very positive experience working with Allcontrols in the context of PCI DSS-related compliance activities for fintech solutions delivered to our customers. Throughout the collaboration, the Allcontrols team demonstrated strong practical knowledge of PCI DSS requirements, a professional approach to communication, and a clear understanding of modern payment and cloud-based architectures. We particularly appreciated their ability to balance compliance requirements with real-world technical and business considerations, providing practical and well-reasoned recommendations instead of purely formal feedback. The overall cooperation process was structured, transparent, and efficient.  Based on our experience, we can recommend Allcontrols as a reliable and technically competent partner for PCI DSS assessment and compliance consulting services within fintech and payment environments.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The Allcontrols team was responsive, professional, and flexible in addressing project-related questions and compliance discussions. Deliverables and feedback were generally provided within the expected timelines, and communication was clear and efficient during all stages of the engagement.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The team demonstrated a strong understanding of modern fintech and payment infrastructures and was able to provide realistic, implementation-focused recommendations instead of purely formal compliance feedback.

Are there any areas for improvement or something Allcontrols could have done differently?

At this stage, we do not have any significant areas for improvement to highlight.

BACKGROUND

Please describe your company and position.

I am the Project coordinator of CoventIT

Describe what your company does in a single sentence.

• Outstaffing
• Software development
• AI solutions
• Recruitment & HR services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• ISO 27001 certification

SOLUTION

How did you find Allcontrols?

Referral

Why did you select Allcontrols over others?

• Good value for cost
• Great feedbacks

How many teammates from Allcontrols were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Allcontrols helped us with our ISMS audit, and the experience was great.

The audit was clear, well-organized, and professional. The auditors were prepared, asked appropriate questions, and explained what they needed from us.

Communication was also on a high level. We always understood the next steps, what was being checked, and what we needed to do. The findings were explained clearly and in a helpfully. 

In addition to audit scope we discussed several related areas including AI, privacy, GDPR compliance and QMS. This made the audit even more valuable and helped us gain a broader understanding of our management system.

The team demonstrated professionalism and independence while remaining friendly and easy to work with, which made the audit process significantly less stressful. 

We highly recomended Allcontrols to any company looking for a professional and well-managed ISMS audit. Allcontrols team provided us with excellent support throughout entire process making the overall audit experience very positive.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The project resulted in the successful completion of our ISMS audit and certification process. Beyond certification itself, we gained a much clearer understanding of risk areas and opportunities for improvement within our organization. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They demonstrated strong project management throughout the engagement, ensuring clear planning and well-structured execution of all audit activities. All deliverables were provided on time, with a proactive approach to scheduling and coordination that helped us stay aligned at every stage. The team responded quickly and flexibly to our needs, adjusting their approach when necessary and providing clear guidance whenever questions or changes arose.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The most impressive was their ability to make the complex ISMS audit process feel transparent and manageable.

Are there any areas for improvement or something Allcontrols could have done differently?

There were no significant issues or concerns during the project. 

BACKGROUND

Please describe your company and position.

I am the Information Security Officer of an information technology company 

Describe what your company does in a single sentence.

Our company develops web, mobile, and conversational chat and voice solutions empowered by AI.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• AllControls was hired to perform an internal audit, specifically to assess our compliance with the ISO/IEC 27001:22 standard.

SOLUTION

How did you find Allcontrols?

Referral

Why did you select Allcontrols over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned
• Other

How many teammates from Allcontrols were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of work

The scope of work involved conducting an internal audit of the Information Security Management System (ISMS) in accordance with the ISO/IEC 27001:2022 standard. This included a thorough review of relevant policies, procedures, and controls to check compliance with the standard's requirements and identify areas for improvement aimed at helping to mature our security processes and controls.

Deliverables

1) The “ISMS Audit Report,” which includes the following:

• • Assessment of compliance with ISO/IEC 27001:2022 requirements.
  • Evaluation of the maturity of ISMS.
  • Recommendations designed to mature our security posture.

2) Templates for internal documents.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

1. Demonstrated auditor expertise: the audit process reflected the auditor’s deep knowledge and proficiency in ISMS best practices;
2. ISMS Audit Report and supporting materials: delivered a Report with actionable recommendations to strengthen the ISMS, along with templates for internal documents;
3. On-time delivery: all project deliverables were completed within the agreed timeframe;
4. Alignment with our expectations: the services provided met agreed standards and fully aligned with our quality expectations.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

AllControls demonstrated strong project management by delivering all items on time and maintaining clear, responsive communication. They promptly addressed our needs and adapted to changes without compromising quality or timelines.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We were most impressed by their auditor’s deep expertise in ISMS best practices, his skill in translating complex topics into clear and simple explanations.

Are there any areas for improvement or something Allcontrols could have done differently?

There is always room for improvement, but in this case, it is difficult to identify anything that could be specifically highlighted.

BACKGROUND

Please describe your company and position.

 I am the CISO & DPO of an information technology company 

Describe what your company does in a single sentence.

IT Service Organization 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• Conduct Internal Audit

SOLUTION

How did you find Allcontrols?

• Online Search
• Referral

Why did you select Allcontrols over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

Describe the scope of work in detail. Please include a summary of key deliverables.

ISO 27001 internal audit. Key deliverables: Comprehensive internal audit report along with detailed gap remediation recommendations 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Working with the vendor was instrumental in helping us prepare for our SOC 2 and ISO 27001 audits. Their team conducted thorough internal audits and delivered a detailed report that became the foundation for our compliance efforts. What stood out most was their deep expertise in security frameworks—they understand how controls map across multiple standards, which saved us significant time and effort.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Their project management was highly structured and reliable. They delivered the internal audit report ahead of schedule, which gave us ample time to prepare for our SOC 2 and ISO 27001 audits. Deadlines were consistently met, and they proactively communicated progress updates without us having to chase them down. Even when we requested adjustments, they adapted quickly without disrupting the timeline.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Beyond administrative controls, their consultants bring strong technical knowledge from hands-on experience in the field. They’re not just advisors; they’ve been in the trenches themselves, which adds tremendous value to their guidance. Their flexibility, responsiveness, and commitment to long-term partnership made them a trusted resource throughout the process.

Another key strength is their industry versatility—they’ve worked with financial services, technology, telecom, and other sectors, so they adapt quickly to different environments. The vendor isn’t just a service provider; they’re a true partner who delivers real results. Highly recommend for anyone navigating complex security and compliance challenges.

Are there any areas for improvement or something Allcontrols could have done differently?

There is nothing to improve. A happy customer here. 

BACKGROUND

Please describe your company and position.

I am the CTO of Bivial AG

Describe what your company does in a single sentence.

It is a deposit-taking financial institution authorised by the Swiss Financial Market Supervisory Authority (FINMA) 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• To complete the endpoint security attestation for connectivity to the SIC system via SWIFT

SOLUTION

How did you find Allcontrols?

Referral

Why did you select Allcontrols over others?

• Good value for cost
• Referred to me

How many teammates from Allcontrols were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

• Consultation sessions for the attestation completion
• Audit of the affected areas
• Solution proposals for streamlined, effective solutions
• Audit confirmation letters
• Audit Report

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Virtual meetings to understand the scope of the project
• Compliant solution proposals
• Necessary reports and letters generation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

That was really the best part. The project was extremely urgent for us and after our enquiry about the project the delivery of the project items were done exactly on time. The responded to our needs extremely accurately. We were really happy about how this project worked out for us.

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The company understood our relatively complex needs very quickly, they provided all helpful material for us to help with the work that had to be done, then audited and documented everything very quickly. These are traits that are hard to find in a partner.

Are there any areas for improvement or something Allcontrols could have done differently?

No area for improvement, our perception is that their work was quite impressive.

BACKGROUND

Introduce your business and what you do there.

I’m the idea and information security manager at an influencer marketing platform.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Allcontrols?

We needed help with an external audit and preparation for our ISO 27001 certification.

SOLUTION

What was the scope of their involvement?

Allcontrols provided cybersecurity services and consulting; they conducted an external audit and ISO 27001 certification preparation. Initially, we had a discovery meeting. They worked on-site for the audit and certification preparation, but the penetration testing with the fake phishing attack was done remotely.

What is the team composition?

We were in contact with 1–2 technical specialists.

How did you come to work with Allcontrols?

We searched on Google and found many platforms with different ratings from people who had gotten certified. Some of these reviewers said Allcontrols was a good company with experienced specialists and auditors. We talked to a few companies that had good feedback from end clients.

We checked service providers who were in the middle of the market in terms of price. We had several discussions with companies' representatives and chose the one who looked much more experienced. We chose Allcontrols because they seemed experienced and were open to conversation.

What is the status of this engagement?

We worked with Allcontrols from June–November 2024.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We received the ISO 27001 certification. Allcontrols did a lot for us to achieve the certification.

How did Allcontrols perform from a project management standpoint?

Allcontrols met deadlines and stayed on budget. They provided a project manager. We used Jira as a tool for management and Google Meet for communication. 

What did you find most impressive about them?

We were impressed with Allcontrols’ flexibility and quality.

Are there any areas they could improve?

There’s always room for improvement in the speed of implementing new features.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of RiskSeal, a startup that provides alternative data for credit scoring for fintech companies. We’re a B2B SaaS company, and we provide an API that allows our clients to put data on their borrowers.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Allcontrols?

As we operate in the fintech space, there are high expectations from our clients in terms of security and the processes around the data they provide to us. We wanted to get ISO 27001 certified, so we needed someone to help us speed things up and prepare us for an audit. We also needed to identify any flaws in our current processes and improve them.

SOLUTION

What was the scope of their involvement?

Allcontrols provided us with their own security management system. They helped us prepare our staff by training them and providing security training, lectures, and questionnaires. We also keep our ISO-related registers, such as inventory and risk management, on their system.

Allcontrols helped us with the audit and reviewed the penetration tests we did ourselves. They also provided us with maintenance and updates using their system.

What is the team composition?

We worked with three people from Allcontrols: Mykhailo, the CEO; Yehor, the security specialist; and an analyst.

How did you come to work with Allcontrols?

Our COO found Allcontrols while doing research and met a couple of companies that offered this service. We ended up interviewing Allcontrols and liked their approach. It seemed like it just clicked.

How much have you invested with them?

We spent around $13,000 to $14,000.

What is the status of this engagement?

We started working together in April 2025, and the project was completed in June 2025. We plan to work with them again later this year to get our SOC 2 certification.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We obtained our ISO certification. Allcontrols gave us a holistic view of the security side of our business. We’re a startup, and we’re running fast, so we sometimes skip certain things for simplicity. Knowing the risks is important, and Allcontrols gave us a bird’s-eye view of all the problems we had. With their recommendations and advice, we were able to fix some of them and add others to our roadmap.

How did Allcontrols perform from a project management standpoint?

Allcontrols did a great job with project management. We had weekly meetings with them and used Google Meet as our primary communication tool. We also used WhatsApp and email. We used Jira for some smaller tasks, but didn’t use it across the team.

What did you find most impressive about them?

I really appreciated Allcontrols’ discipline and commitment to the goal. It was important for us to get the certificate soon, and they were ready to get involved and support us as much as needed.

Are there any areas they could improve?

There were some minor things, like the document formatting they used. I would have preferred them to be a little bit more accurate on this, but I understand we had some short deadlines, and there was no time for it.

Do you have any advice for potential customers?

I recommend being ready to dedicate enough time to the project. It’s not something Allcontrols can do for you; you still need to do a lot of work. All the heavy lifting is on your side. You need to ensure your process aligns with what’s written in the documents and that you have all the evidence you need to implement them. This is a lot of work, so I recommend preparing your team and ensuring they’re aware that this is important.

BACKGROUND

Introduce your business and what you do there.

I’m the head of IT and information security at Neonomics, a fintech company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Allcontrols?

We needed help with penetration testing.

SOLUTION

What was the scope of their involvement?

Allcontrols provided penetration testing for our APIs. The team found a lot of issues and provided recommendations on how to resolve them. After we fixed the issues, Allcontrols did retesting.

What is the team composition?

We worked directly with Mykhailo.

How did you come to work with Allcontrols?

Allcontrols was recommended by a friend.

What is the status of this engagement?

We worked together from September–October 2024. However, we'll hire them for our next penetration test in September or October 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Allcontrols provided high-quality work and found many issues that previous companies hadn’t found. I was happy with the engagement and will work with them again.

How did Allcontrols perform from a project management standpoint?

Allcontrols delivered on time and stayed on budget, and the team was responsive to our requests. Whenever I asked for something to change or re-check, the process was really fast because we had a direct line with Mykhailo. We used Jira for project management and communicated via phone calls and Slack.

What did you find most impressive about them?

Allcontrols delivered exactly what we expected.

Are there any areas they could improve?

I can’t think of anything for Allcontrols to improve.

Do you have any advice for potential customers?

Just ask for what you need.

BACKGROUND

Introduce your business and what you do there.

I’m the director of Neolink, an IT company. We provide cloud-based acquiring and issuing platforms, enabling financial institutions and fintechs to launch and scale modern payment services with minimal IT effort, supported by PCI-DSS-certified infrastructure and turnkey solutions.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Allcontrols?

We need to maintain PCI DSS status for our clients, which means undergoing yearly audits

SOLUTION

What was the scope of their involvement?

Allcontrols provided us with penetration testing and auditing services, resulting in timely delivery of AOC and ROC

What is the team composition?

We worked with 2–5 teammates from Allcontrols.

How did you come to work with Allcontrols?

We found them through a personal referral. We chose them because their pricing fit our budget, they had a great culture fit, and they had a straightforward auditor who knew the business.

What is the status of this engagement?

January - March 2026

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Allcontrols has helped us achieve PCI DSS compliance. The comments from the auditor have been relevant and specific, which has helped us improve our infrastructure.

How did Allcontrols perform from a project management standpoint?

Allcontrols has delivered on time. We use email and a messaging app to communicate. The auditor uses chat, email, and Excel to track questions.

What did you find most impressive about them?

We’ve been impressed with how approachable the auditor is. They ask relevant questions and understand our business model.

Are there any areas they could improve?

I don’t think there’s anything they can improve on.

BACKGROUND

Please describe your company and position.

I am the Head of Cybersecurity Division & GRC of Creatio

Describe what your company does in a single sentence.

Creatio provides the leading CRM in the industry to its many global customers.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Allcontrols to accomplish?

• Internal audit for recertification of ISO 27001 certificate
• Internal audit for recertification of ISO 27017 certificate
• Internal audit for recertification of ISO 27018 certificate

SOLUTION

How did you find Allcontrols?

Past relationship

Why did you select Allcontrols over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Allcontrols were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

We utilized this company to perform internal audits for our preparation of ISO 27017, ISO 27018, and ISO 27001 recertification audits. As well as verification of GDPR and HIPAA compliance.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Regular meetings, regular status reports, and a complete overview of all controls measured. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management was seamless from planning to implementation. The project went extremely smoothly. Expectations were set early on in the project. And were met on time. 

What was your primary form of communication with Allcontrols?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Our specific auditor was very knowledgeable of the controls being measured. They provided deep insight into each control. 

Are there any areas for improvement or something Allcontrols could have done differently?

I was very impressed with Allcontrols professionalism. They delivered exactly what we expected of them.