Brickken clears EU’s ISO 27001, DORA norms

By Aarav Garg

Brickken, a Barcelona-based tokenisation infrastructure provider, has completed the audit process for ISO 27001 certification and achieved compliance with the European Union’s Digital Operational Resilience Act (DORA), marking a step towards meeting institutional requirements in financial services.

The company said the two steps will make engaging with banks, asset managers and government entities more effective, which usually requires both ISO 27001 certification and DORA alignment from technology providers before entering into commercial agreements.

ISO 27001 is an internationally recognised standard for information security management, based on independently audited controls and processes. DORA is a mandatory EU regulation that requires financial institutions and their technology partners to demonstrate operational resilience across areas such as risk management, incident reporting, resilience testing and third-party oversight.

Edwin Mata, CEO and Co-Founder of Brickken, said, “We built Brickken to serve as infrastructure for capital markets, and that means meeting the same standards that banks and asset managers hold their own vendors to. ISO 27001 certification and DORA alignment prove that our platform is ready for institutional deployment – auditable, resilient, and regulation-aligned by design.”

Brickken said the certifications address a barrier in enterprise procurement, where security and compliance reviews can lead to delays. With ISO 27001 in place, the company can provide a single audited document that allows procurement teams to verify its security standards without conducting extensive parallel assessments. This could potentially reduce onboarding timelines by several weeks.

DORA alignment further enables regulated financial institutions to integrate Brickken into their information and communication technology (ICT) risk management frameworks without requiring additional remediation.

Brickken plans to pursue SOC 2 certification as the next step, focusing on expanding in the United States market.