Asteron

BACKGROUND

Please describe your company and position.

I am the CTO of RiskRadar

Describe what your company does in a single sentence.

Review contracts faster with role-based playbooks RiskRadar triages contract risks as High, Medium, or Low—then proposes concrete redline wording. Export a reviewed DOCX with Track Changes in minutes.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Asteron to accomplish?

• ISO 27001 certification

SOLUTION

How did you find Asteron?

Referral

Why did you select Asteron over others?

• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Asteron were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Asteron guided us through ISO 27001 and ISO 27701 certification from start to finish. They ran the initial gap assessment, built our ISMS and privacy management system, wrote and adapted the policies, set up automated evidence collection connected to our infrastructure, and prepared us for the external audit. We had a dedicated expert who managed the whole process in our Slack, including an internal audit before the real one and coordination with the certification body. We ended up with both certificates and a working compliance setup, not just a folder of documents.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We passed both certification audits on the first attempt, with no major nonconformities. The whole process took around 5 months, which was faster than the timelines other vendors quoted us. Our own team spent maybe 2-3 hours a week on it instead of having someone work on compliance full time. We've already used the certificates in two enterprise deals that required ISO 27001.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Very smooth. Everything ran through Slack, so it felt like working with a colleague rather than an external agency. They kept a clear plan with deadlines and actually chased us when we were the bottleneck, which honestly helped. Responses usually came within a few hours. All milestones were delivered on time, including the audit date we committed to.

What was your primary form of communication with Asteron?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The combination of a real expert and automation. A lot of compliance tools just give you software and templates and leave you alone with them. Here a person did the actual work while the tooling handled evidence collection in the background. We were impressed with the fixed price with a contractual certification guarantee - we knew exactly what we'd pay and that they had skin in the game.

Are there any areas for improvement or something Asteron could have done differently?

Nothing significant. At the beginning the volume of questions and requests for access felt intense, but in hindsight that's what made the rest of the process fast. Maybe a slightly clearer upfront overview of what our team's time commitment would look like week by week.

BACKGROUND

Please describe your company and position.

I am the COO of EasyFax

Describe what your company does in a single sentence.

The company provides an online fax forwarding solution for B2B organizations that still need to handle fax-based communication as part of their daily operations. Their platform helps businesses receive, route, and resend faxes digitally, reducing manual work and making document exchange easier to manage. It is especially useful for companies working with legacy systems, regulated workflows, or partners that still rely on fax communication. The service focuses on reliability, simplicity, and keeping fax processes operational without traditional fax infrastructure.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Asteron to accomplish?

• ISO 27001 certificat

SOLUTION

How did you find Asteron?

Referral

Why did you select Asteron over others?

• Pricing fit our budget
• Good value for cost

How many teammates from Asteron were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We hired Asteron to take us through the full ISO 27001 certification process from zero. They started with a gap analysis of our current state, then built the ISMS from the ground up: policies, procedures, risk register, Statement of Applicability, asset inventory, and the supporting documentation set. They also ran the risk assessment with us, prepared our team for the audit, conducted the internal audit, and supported us during the external certification audit itself. Training sessions for staff were part of the package.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We passed the certification audit on the first attempt without major nonconformities. Timeline-wise, we finished within the window we agreed on at kickoff. Beyond the certificate, the practical outcome is that our internal security processes are actually being followed now, and we can answer enterprise client security questionnaires in a fraction of the time it used to take.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Asteron's project management was one of the strongest parts of the engagement. From day one we had a dedicated Slack channel with our assigned compliance lead, which made the whole thing feel like working with an internal team rather than an external consultant. Most questions got answered within a few hours, sometimes within minutes. They set clear milestones at kickoff and stuck to them, and we hit the certification audit on the timeline they promised at the start. When we needed to adjust scope or pull something forward, they accommodated it without drama.

What was your primary form of communication with Asteron?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

A few things stood out. First, the fixed price - we knew the full cost before signing, and it didn't move once during the project, which is rare in this space. Second, the contractual certification guarantee: they take real responsibility for the outcome, not just for the deliverables. Third, they don't hand you a template pack. Every policy and control was adapted to how our company actually operates, and they explain the "why" behind each one in plain language, which made internal buy-in much easier. The combination of automation under the hood and a real human running the project is the part most other providers don't get right.

Are there any areas for improvement or something Asteron could have done differently?

Honestly, very little. If I'm reaching for something, it would be that some of the early infrastructure mapping moved faster than our internal team could keep up with at first. Once we caught up, the pace was actually a benefit, but a slightly more gradual ramp-up in the first week would have been easier on us. Minor point.

BACKGROUND

Introduce your business and what you do there.

Aiby builds, acquires, and operates consumer apps and gaming businesses globally, leveraging AI, market analysis, and product expertise to deliver high-quality digital products. The company also has divisions in publishing, M&A, and a venture studio.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Asteron?

We hired Asteron to guide us through the ISO 27001 certification process and help us build a structured, practical information security management system suitable for our business. Our main goals were to understand the certification requirements, prepare the necessary documentation, improve internal processes, and ensure we were ready for the audit. We also wanted the process to be efficient and not overly complicated for our team.

SOLUTION

What was the scope of their involvement?

Asteron handled the full ISO 27001 preparation process for us. Their scope of work included reviewing our existing information security processes, identifying gaps, helping us define the required policies and procedures, and guiding us through the implementation of the information security management system.The main deliverables included ISO 27001 documentation, risk assessment support, guidance on required security controls, internal process recommendations, audit preparation, and ongoing support throughout the project. They also helped us understand the requirements clearly and kept the process structured and manageable for our team.Specifically, Asteron helped us prepare the key ISO 27001 documentation required for the certification process. This included the information security policy, risk assessment and risk treatment documentation, Statement of Applicability, security control-related policies and procedures, internal audit materials, and management review materials.They also provided practical templates and guidance tools that helped us organize the documentation, track required actions, and make the preparation process more structured and manageable for our team.

What is the team composition?

We worked with 2–5 teammates from Asteron.

How did you come to work with Asteron?

We found them through a referral. We chose them over other options because they were close to my geographic location, offered good value for the cost, and had company values aligned with ours.

How much have you invested with them?

We spent around $10,000–$50,000 on this project.

What is the status of this engagement?

We worked together from October 2025–February 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

The main measurable outcome was that we successfully completed the ISO 27001 certification process. Asteron helped us move from preparation to audit readiness in a structured and efficient way.Other clear outcomes included having all required ISO 27001 documentation prepared, completing the risk assessment and risk treatment process, defining the necessary internal policies and procedures, and improving our overall information security management approach.The project also helped us create a clearer structure for security responsibilities, internal processes, and ongoing compliance activities. Overall, the result fully met our expectations.We didn’t track many formal KPIs during the project, but we had several clear indicators of progress and success. The main one was reaching audit readiness within the planned timeline. We also tracked the completion of key ISO 27001 documentation, the closure of identified gaps, completion of the risk assessment and risk treatment process, and readiness of the required internal policies and procedures.By the end of the project, the main security and compliance gaps had been addressed, the documentation was complete, and our team was prepared for the certification audit. For us, the most important measurable outcome was successfully completing the ISO 27001 certification process.

How did Asteron perform from a project management standpoint?

Asteron’s project management was excellent. They kept the process very well organized from start to finish, clearly explained each step, and ensured we always understood what was needed from our side.Communication was fast, clear, and proactive. They were responsive whenever we had questions and helped us stay focused on the right priorities throughout the project. We primarily communicated through virtual meetings, emails, and messaging apps.Moreover, they delivered everything on time. The project stayed on track, and their structured approach made the ISO 27001 preparation process much smoother and more efficient for our team.

What did you find most impressive about them?

What impressed us most was how much value Asteron delivered. For what felt like the cost of a platform, they essentially handled the project end-to-end themselves and guided us through the full ISO 27001 process.They required minimal time from our internal team, which was very important for us. At the same time, the quality of their work was very high. They were professional, efficient, fast, and clearly experienced in ISO 27001.Overall, they made a complex certification process feel much simpler and more manageable for us.

Are there any areas they could improve?

Honestly, there was nothing significant we would change. We were fully satisfied with the cooperation, the quality of work, communication, and the final result.Asteron managed the process very professionally, delivered everything on time, and made the ISO 27001 certification process much easier for our team. Everything met our expectations, so we didn’t have any meaningful areas for improvement to mention.

Do you have any advice for potential customers?

There were no major unexpected challenges or delays that significantly affected the project outcomes. The process was well structured, and Asteron helped us understand what needed to be done at each stage.As with any ISO 27001 project, some parts required internal coordination from our side, especially around documentation, risk assessment, and aligning internal processes. However, Asteron guided us through these steps clearly, which helped us avoid unnecessary delays and stay on track.Overall, the project went smoothly, and we achieved the expected outcomes.