ISO 9001
Certificate Number: 163952009
Standard: ISO 9001:2015
Issue Date: 07/10/2025
Expiry Date: 06/10/2028
Issuing body: Citation ISO Certification
As an ISO 9001 certified organisation, we have implemented quality management system requirements for all areas of the business including:
- Facilities
- People
- Training
- Services
- Equipment
ISO 9001 accreditation gives you the confidence that Dajon have the quality systems in place that will provide the foundation to better customer satisfaction, staff motivation and continual improvement.
ISO 14001
Certificate Number: 163972009
Standard: ISO 14001:2015
Issue Date: 07/10/2025
Expiry Date: 06/10/2028
Issuing body: Citation ISO Certification
The international standard for Environmental Management Systems
ISO 14001 is the principal management system standard which specifies the requirements for the formulation and maintenance of an EMS. There are three fundamental commitments required in an environmental policy that meets the requirements of ISO 14001. These include:
- Prevention of pollution
- Compliance with legislation
- Continual improvement of the EMS
These commitments help drive improvements in overall environmental performance.
ISO 27001
Certified since October 2010
Certificate Number: 175632020
Standard: ISO/IEC 27001:2022
Issue Date: 29/10/2026
Expiry Date: 28/10/2029
Issuing body: Citation ISO Certification
The international standard describing best practice for an Information Security Management System
Certification to ISO 27001 shows Dajon’s dedication to the security of the information we are dealing with. In addition the standard also requires us to implement the following policies; confirming Dajon’s commitment to quality, security and durability.
- Organisational security
- Asset classification and control
- Personnel security
- Physical and environmental security
- Communications and operations management
- Access control
- System development and maintenance
- Business continuity management
- Compliance
BS 10008
Compliant since May 2014
Evidential weight and legal admissibility of electronic information specification
BS 10008 specifies what is required in order to implement and operate an electronic information management system. The standard is based on BIP 0008 which was designed to deal with issues relating to the integrity and authenticity of information stored electronically.
The contents of the standard include:
- The availability and accessibility of information
- The use of document management
- The management of quality issues related to document scanning processes
- The provision of a full audit trail for the life of a piece of electronic information
- The electronic transfer of information from one computer system to another
- Copyright management
- System maintenance
Dajon is audited compliant with BS 10008.
PDSC Digitally Aware
Police Digital Security Centre
Dajon have successfully completed the Digitally Aware risk assessment processes, and declaration of implementation of basic cyber security controls to reduce vulnerability to the most common types of cyber crime.
Cyber Essentials
Certified since October 2014
Certificate ID: c8d5bfb8-1f5e-465c-9890-502d7e957974
Issue Date: 24/06/2026
Expiry Date: 24/06/2027
Issuing body: Citation Cyber
Guard against the most common cyber threats and demonstrate commitment to cyber security
Cyber Essentials is a Government-backed, industry-supported scheme to help organisations protect themselves against common online threats.
It is the Government’s answer to a safer Internet space for all organisations, of any size, in any sector. Developed and operated by the National Cyber Security Centre (NCSC), Cyber Essentials is considered the best first step to a more secure network.
Dajon’s Cyber Essentials certification showcases our credentials as trustworthy and secure when it comes to cyber security.
NHS Data Security and Protection Toolkit (DSPT)
Organisation code: 8K949
Current Status: 2025-26 (version 8) – Standards exceeded
Date Published: 28/03/2026
All organisations that have access to NHS patient data and systems must use the Data Security and Protection Toolkit to publish an assessment against the National Data Guardian’s 10 data security standards.
Data Protection Act 2018
Registration reference: Z1990032
Date registered: 03/02/2010
Registration expires: 02/02/2027
Issued by: Information Commissioner’s Office
The seven principles are set out in Article 5 of the GDPR (and apply in the same form under the UK GDPR):
- Lawfulness, fairness and transparency: Personal data must be processed on a valid lawful basis, in a way people would reasonably expect, and with clear information about what’s being done with it.
- Purpose limitation: Data should be collected for specified, explicit and legitimate purposes, and not reused in ways incompatible with those purposes.
- Data minimisation: Only collect and process what’s adequate, relevant and necessary for the purpose.
- Accuracy: Personal data must be kept accurate and, where necessary, up to date, with inaccurate data corrected or erased promptly.
- Storage limitation: Data shouldn’t be kept in an identifiable form for longer than needed, which is why retention schedules and secure destruction matter.
- Integrity and confidentiality (security): Appropriate technical and organisational measures must protect data against unauthorised access, loss, damage or destruction.
- Accountability: The controller is responsible for complying with the other six principles and must be able to demonstrate that compliance, for example through policies, records of processing, DPIAs and audit trails.