HealthBox HR Case Study

“Starting without anything in place, we were able to achieve ISO/IEC 27001:2022 certification in 12 weeks. Thank you, Hicomply!”

– Paul Clulow, HealthBoxHR Chief Technology Officer

HealthBoxHR develops revolutionary future-proof HR solutions that are easy and affordable for organisations of all shapes and sizes. The secret to HealthBoxHR’s success is the blend of tech expertise with real-world HR experience.

In Hicomply, HealthBoxHR found an information security partner that shared the same commitment to marrying innovation with a people-centred approach.

The review

“Hicomply made the whole process of building and managing our ISMS straightforward and uncomplicated. The policy and procedure templates saved a great deal of time and they are linked to the required controls, while the dashboard provides a quick, easy overview and status of our ISMS.

“The onboarding process got us off to a great start and, thereafter, the support has been superb when we’ve needed it – with prompt responses.”

Why does your organisation need 27001?

“Our web app used by clients holds enormous quantities of their sensitive company, HR and payroll data. They need to be confident that this data is stored and handled in a secure way.”

“Having the certification is also a prerequisite for some clients wishing to engage with us. ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS) and demonstrates that we as a business have put in place a system to manage risks related to the security of data handled by the company.”

How did you manage 27001 previously?

“We had no formal processes in place.”

Why did you choose Hicomply?

“Having had demos from the four companies I’d shortlisted, Hicomply stood out by offering ease of use, personal support and a cost-effective solution.”

How have you found the customer service you have received?

“The team (and especially Zoe) exceeded my expectations. Personal one-to-one meetings during the onboarding stage provide guidance and support, which took away a great deal of the frustration usually associated with having to learn a new platform and its processes.

“When support was requested by email these were responded to comprehensively and without delay. All of this led us to being able to achieve ISO/IEC 27001:2022 certification, starting without anything in place, to completion in 12 weeks.”