CASE STUDY
How SQUAKE are strengthening client confidence through ISO certification

About SQUAKE

SQUAKE is a leading climate-tech company dedicated to driving sustainability in the travel and logistics industries. Their platform offers an end-to-end solution for CO₂ calculation, reporting, mitigation, and CO₂ at point-of-sale.

Location

Germany, Berlin

Industry

B2B SaaS

Employees

11-50

The Challenge

Meeting high corporate standards and reducing manual processes

As a company targeting large corporations, data security was a critical factor in winning and retaining clients. “We work with big names like Airbnb and Siemens, and for them, data security is crucial,” explained Yury Erofeev R&D Sustainability Manager at SQUAKE. “We were often asked about our security practices in RFPs, and having ISO 27001 certification became a key requirement.”

Before Secfix, SQUAKE managed their compliance processes in Notion. “It was inconvenient and time-consuming. We knew we couldn’t scale our compliance efforts efficiently without automation. We needed a solution that would reduce the manual workload and ensure nothing was overlooked”, explained Yury Erofeev.

The Solution

Automation saved an enormous amount of time and effort

Secfix provided SQUAKE with a fully automated compliance platform that simplified the entire certification process. “Everything was pre-filled and well-structured,” Yury Erofeev noted. “We no longer had to scramble to find documentation — it was all there, clearly organized. This saved us an enormous amount of time and effort.”

One standout feature was Secfix’s clear mapping of compliance evidence. “During the audit, instead of searching through multiple documents, we could instantly show the auditor exactly what they needed,” Yury Erofeev added. “That level of clarity made the entire audit much smoother.”

Why Secfix

Faster processes and improved security

For businesses pursuing ISO 27001 certification, Yury Erofeev offered practical advice: “Don’t get lost during the audit. Stick to the compliance report and use the evidence provided by Secfix to address any auditor questions quickly and confidently.”

They also emphasized the importance of understanding company-specific risks and maximizing platform capabilities. “If you rely on external tools like Notion or Google Docs, you’ll face more auditor questions. Keeping everything within Secfix reduces confusion and speeds up the process.”

Results

SQUAKE minimized manual workload and optimized device monitoring

By partnering with Secfix, SQUAKE accelerated their compliance efforts and enhanced their security posture. “We improved antivirus coverage, and streamlined device monitoring,” Yury Erofeev said. “Secfix’s monitoring tools made it easy to prevent human errors and enforce security policies.” The Trust Center feature also playing a vital role in building client confidence. “It’s live on our site, and while we’re still rolling out communication about it, we know it will be a powerful tool for transparency and trust,” Yury Erofeev shared.

Secfix saved us an enormous amount of time and effort. Everything was pre-filled and well-structured. We no longer had to scramble to find documentation - it was all there, clearly organized.

Yury Erofeev

R&D Sustainability Manager @ SQUAKE