About us
We do this work because we have been on the other side of it.
SecuriFii is the information security and compliance assurance practice of SecureV PieTech Private Limited, incorporated in New Delhi in December 2022. We prepare organisations for ISO/IEC 27001, SOC 2 and technical security assessment.
Most compliance work is sold as a document exercise, and most of it is bought by someone who has been told to fix a procurement blocker by a date. That combination produces management systems built to survive one audit — and organisations that discover the difference at the first surveillance visit.
We work the other way round. The system has to be one your team can actually operate after we leave, because the certificate is renewed on evidence that it ran, not on the folder that was assembled the week before Stage 2.
We hold ISO/IEC 27001 certification ourselves. That is partly a commercial necessity in this field and partly the point: we run the management system we ask clients to run, on the same cycle, with the same surveillance audits and the same nonconformities to close.
About us
The company
- Legal entity
- SecureV PieTech Private Limited
- Incorporated
- December 2022, New Delhi
- CIN
- U72900DL2022PTC403376
- Registered office
- 20, Ground Floor, Near Modi Mill, Okhla Phase III, Okhla Industrial Estate, New Delhi 110020
- Our certification
- ISO/IEC 27001:2022
Trusted by
Teams that answer to regulators, auditors and enterprise buyers.
Independence and impartiality
SecuriFii is not a certification body and not an accreditation body. We do not issue certificates, we do not sign attestation reports, and we do not perform third-party assessment of the management systems we build.
That separation is required by ISO/IEC 17021-1, which bars a certification body from certifying a management system it consulted on. It exists so that a certificate means an independent party examined your system — which is the only reason a customer treats it as evidence.
We hold no commercial relationship with any certification body that would benefit either of us from a referral, and we will tell you if that ever changes. When you ask us to help you select an assessor, the shortlist reflects fit and accreditation scope, and nothing else.
What we are usually brought in to do.
ISO/IEC 27001 — Information Security Management
Build an information security management system that survives Stage 2 — and the three years of surveillance that follow.
SOC 2 Type 1 Readiness
Prove your controls are designed and in place on a given date — the fastest honest way to unblock a contract.
SOC 2 Type 2 Readiness
Evidence that your controls ran for months, not that they existed on a date — the report enterprise procurement usually means.
Vulnerability Assessment and Penetration Testing (VAPT)
Find what an attacker would find, ranked by what it would actually cost you — and get a report your auditor and your engineers can both use.
ISO 22301 — Business Continuity Management
Know which activities cannot stop, how long they can be down, and what you will actually do — tested before you need it.
ISO/IEC 27701 — Privacy Information Management
Turn privacy from a policy document into a management system, with the records a regulator or an enterprise buyer will ask to see.