Case Study
Digital Trust

Building trust through stronger information security governance

Learn how POLi payments achieved ISO/IEC 27001 to strengthen governance, build customer confidence and support enterprise growth.

View and download

“Having ISO certification is a ticket to participate as a fintech providing technology to large enterprises.”

Andrew Simmonds Chief Executive, POLi

The Company

Building trust through ISO/IEC 27001 certification

Handling five million annual transactions, POLi used certification to streamline onboarding and support sustainable growth.

Following its transition to a standalone New Zealand business, POLi payments achieved ISO/IEC 27001 certification with BSI. It strengthened information security governance, supported customer assurance and enabled engagement with larger organizations.

The Challenge

From shared certification to independent security assurance

Until November 2023, POLi NZ distributed the POLi service under Australia Post's ISO/IEC 27001 certification. When it became a standalone business, it retained strong security practices but needed its own certification and governance policies. As an established fintech, POLi already had the right tools. The challenge was to formalize them within a structured management system. Rather than pursuing minimum compliance, POLi wanted a tailored system that would provide assurance to auditors and enterprise customers.

The Solution

Certification built around POLi's business context

After thorough preparation, POLi progressed through the audit process, with Stage 1 feedback helping the business prepare for certification. BSI took time to understand POLi's context as a fully remote organization. It focused on controls relevant to POLi's information security risks and helped define an appropriate scope. The result was a collaborative dialogue rather than a box-ticking exercise. POLi's QA manager also completed BSI Internal Auditor training, while BSI's digital portal provided a central location for reports and findings.

From strong security practices to ISO/IEC 27001 certification

A diverse business development team plans a marketing strategy using customer insights from digital displays to launch a campaign that promotes products and services, generating awareness and sales opportunities during a meeting in the business office.

Strengthened information security governance and management oversight.
Provided independent assurance for enterprise and government customers.
Simplified onboarding by reducing time-consuming security assessments.
Enabled growth opportunities with larger organizations and key projects.

Why BSI

A trusted certification partner for a growing fintech

BSI combined rigorous auditing with local expertise, helping POLi achieve certification with confidence.

POLi chose BSI for its credibility and strong reputation. With local market knowledge, clear communication and responsive support, BSI delivered an approach that was tailored to the specific needs of the business.