Scope of Certification

The scope of the ISO/IEC 27001:2022 certification includes the information security management system (ISMS) supporting the design, development, and support of the Totara Suite, supplementary cloud product offerings, and global operations teams affecting the ISMS. The following locations are in the scope of certification:

United Kingdom (HQ):HQ, Business Ops, Engineering, HR, IT
New Zealand: R&D, Engineering, HR, Security, IT
United States: IT, Security, Marketing

This is in accordance with the SOA: V1, October 2025

Certification No.:                      4837-1193060125
Original Date:                             December 15, 2025
Latest Issue Date:                       December 15, 2025
Expiration Date:                        December 14, 2028

The CIRQ certification mark is the property of CIRQ and is subject to the restrictions and requirements established in the Terms of Use for the CIRQ Certification Mark as referenced in the CIRQ Quality Manual.