ROC Achieves ISO 27001 Certification to Support Enterprise and Government Procurement
The certification provides independent validation of security governance, risk management and data-protection controls supporting ROC’s infrastructure.
Sentiment and the balance of points
Rhea-AI Sentiment reads the wording of the document, how positive or negative its language is on a 1 to 5 scale. The balance of points shown with the takes weighs what the document actually discloses, so the two can disagree, for example when a trial that missed its main goal is described in upbeat language.
Rhea-AI Summary
ROC (Nasdaq: ROC) has received ISO/IEC 27001 certification for the information security management system supporting its technology offerings. The certification covers software development, delivery and operation, including software-as-a-service offerings and supporting cloud infrastructure. It was issued by an independent certification body accredited by the ANSI National Accreditation Board.
ROC says the certification can reduce a potential procurement barrier and streamline security reviews for enterprise and government buyers. The certification is valid for three years, subject to annual surveillance audits, and does not guarantee that security incidents will not occur.
Positive
- Minor pointISO/IEC 27001 certification achieved for the information security management system supporting software, SaaS and cloud infrastructure.
- Minor point. Forward-looking: it has not happened yet and may not happen.ROC says certification can reduce a potential procurement barrier in markets with demanding security requirements.
Negative
- Minor pointThree-year certification remains subject to annual surveillance audits.
Key Figures
- Certification validity
- 3 years
- Subject to annual surveillance audits
Key Terms
iso 27001 regulatory
isms technical
saas technical
AI-generated analysis. How Rhea-AI works. Not financial advice.
Internationally recognized certification validates ROC’s information security management system and controls, which can help streamline security reviews and compliance checks for buyers in highly regulated markets
DENVER, CO, Nov. 04, 2026 (GLOBE NEWSWIRE) -- Rank One Computing Corporation d/b/a ROC (Nasdaq: ROC) (“ROC” or the “Company”), a U.S. leader in Vision AI, building unified biometric, video analytics, and digital evidence solutions, today announced that it has received ISO/IEC 27001 certification of its information security management system (“ISMS”) from an independent certification body accredited by the ANSI National Accreditation Board (“ANAB”). The certification covers the ISMS supporting the development, delivery, and operation of ROC’s software products, SaaS offerings, and supporting cloud infrastructure.
“Security and privacy are fundamental to ROC and align with how enterprise and government customers evaluate and procure technology,” said ROC Chief Operating Officer Blake Moore. “ISO 27001 is an independent validation of how we manage information security risk and protect sensitive data. It can also help reduce a potential procurement barrier as we scale ROC’s technology across regulated markets and other sectors with demanding security requirements.”
Achieving ISO 27001 certification provides the Company with independent validation of the security governance, risk management, and data-protection controls supporting ROC’s technology infrastructure. For ROC’s core enterprise and government customers, ISO 27001 provides a well-recognized security baseline that can streamline vendor-risk assessments and procurement reviews by demonstrating that ROC maintains an independently audited ISMS for managing sensitive information and security risk.
“Independent NIST evaluations of ROC’s algorithm performance and ISO 27001 certification of its information security management system provide complementary assurance. Together, these assessments can strengthen customer confidence in both the performance and governance of ROC’s technology,” added Mr. Moore.
ISO 27001 requires organizations to establish, maintain, and continually improve an information security management system addressing areas including risk assessment, access controls, incident response, business continuity, vendor management, and data protection. ROC believes the certification will strengthen its competitive position as it expands SaaS and Vision AI solutions into regulated markets where biometric, identity, and other sensitive data are subject to rigorous security and privacy requirements. The certification is valid for three years, subject to annual surveillance audits, and does not guarantee that security incidents will not occur.
About ROC
ROC is a leading U.S. developer of Vision AI, delivering sovereign biometrics, video analytics, and digital evidence through a unified platform. This enables agency and integrator partners to unlock faster, more accurate, and cost-efficient capabilities. At its core, ROC transforms raw pixels into real-time operational awareness for defense, public safety, and digital commerce. The Company is headquartered in Denver, Colo., with additional hubs in Grand Rapids, Mich., and Morgantown, W.Va. For more information, please visit the Company’s website: www.roc.ai.
Forward-Looking Statements
This press release may contain forward-looking statements. These statements are made within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, and are intended to be covered by the “safe harbor” provisions of the U.S. Private Securities Litigation Reform Act of 1995. These forward-looking statements can be identified by terminology such as “will,” “expects,” “anticipates,” “future,” “intends,” “plans,” “believes,” “estimates,” “confident,” “may,” “could,” “should,” “would,” “potential,” “continue,” and similar expressions that predict or indicate future events or trends, although not all forward-looking statements contain these identifying words. The Company may also make written or oral forward-looking statements in its periodic reports to the U.S. Securities and Exchange Commission (the “SEC”), in its annual report to shareholders, in press releases and other written materials, and in oral statements made by its officers, directors, or employees to third parties. Statements that are not historical facts, including statements about the Company’s beliefs and expectations, are forward-looking statements. Forward-looking statements in this press release include, without limitation, statements regarding the expected benefits of the Company’s ISO/IEC 27001:2022 certification, including its anticipated effect on customer security reviews and procurement processes, the Company’s competitive position, and the Company’s plans to expand its SaaS and Vision AI solutions into regulated markets. Forward-looking statements involve inherent risks and uncertainties. Therefore, caution must be exercised in relying on forward-looking statements as a number of factors could cause actual results to differ materially from those contained in any forward-looking statement, including but not limited to the following: (i) the Company’s goals and strategies; (ii) the Company’s future business development, financial condition, and results of operations; (iii) the Company’s ability to maintain its ISO/IEC 27001 certification through annual surveillance audits and recertification; (iv) the extent to which current and prospective customers value or rely on ISO/IEC 27001 certification, or instead require other or additional certifications, authorizations, or compliance requirements, such as FedRAMP, GovRAMP, CMMC, or the CJIS Security Policy; (v) cybersecurity incidents, breaches, or other failures of the Company’s systems or controls, which certification does not prevent; (vi) competition, including the possibility that competitors hold the same or more extensive certifications; (vii) the Company’s ability to successfully commercialize its SaaS offerings and expand into regulated markets; and (viii) changes in laws, regulations, and industry standards governing biometric information, artificial intelligence, privacy, and data security. Further information regarding these and other risks is included in the Company’s filings with the SEC, including under the heading “Risk Factors” in the Company’s Annual Report on Form 10-K for the year ended December 31, 2025, and subsequent Quarterly Reports on Form 10-Q, which are available at www.sec.gov and on the Company’s investor relations website. All information provided in this press release is provided, and the forward-looking statements included herein are made, solely as of the date of this press release, and the Company undertakes no obligation to revise or update any forward-looking statement, whether as a result of new information, future events, or otherwise,, except as required under applicable law.
Media inquiries:
Matt Aitken, VP of Marketing
media@roc.ai
Investor inquiries:
CORE IR
ir@roc.ai
FAQ
AI-generated questions and answers. How Rhea-AI works. Not financial advice.
What does ROC’s ISO 27001 certification cover?
The certification covers ROC’s information security management system supporting the development, delivery and operation of its software products, software-as-a-service offerings and supporting cloud infrastructure. An independent certification body accredited by the ANSI National Accreditation Board issued the certification.