We are proud that our platform has achieved both the ISAE 3402 Type 1 and Type 2 statement!
We are the first ESG software provider in the Benelux to receive both these statements. It is a testament to the high level of accuracy and reliability of our platform, and for our users it means that it will save them significant time and (audit) costs.
ISAE stands for International Standard for Assurance Engagements. It is an audit standard for reporting on the control of outsourced processes, such as data processing, change procedures, and data security. Historically, ISAE statements have been used in areas like payroll administration outsourcing. Salacia anticipates that ISAE 3402 will become the standard for CSRD software.
Last year, we already received the ISAE 3402 type 1 statement after thoroughly examining our processes, identifying potential risks at each step within our platform and implementing measures to mitigate these risks.
Martijn Sanderse (CTO): “We are extremely proud of this 2nd ISAE report. It demonstrates that we have the right processes in place to produce reliable ESG data and that we implemented them according to plan. Reliable ESG data is crucial for strategic decision making within companies, for setting clear reduction targets to reduce impact and of course to comply with European (ESRS) sustainability reporting requirements. Our platform serves as a personalized ESG Data Hub for our clients, that makes it much easier to improve sustainability in business operations. The ultimate goal of sustainability data gathering and monitoring is not to report once a year but to create a more sustainable, resilient business. Our platform enables our clients to achieve that.”
For companies, this report means the quality of the delivered sustainability data is guaranteed. It simplifies and reduces the labour intensity of the audit process. It also clearly documents which data is used, how it is processed, and how reliable and accurate information is delivered, including data security and change control.
To obtain the ISAE report, Salacia Solutions meticulously documented all steps and components of its process. This includes data ingestion, accurate calculations, error detection and resolution, and correct presentation of results according to the latest regulations. User management and controlled implementation of software changes are also part of this.
Following this, we analysed all process steps and identified all risks, leading to a list of measures to prevent or at least detect these risks. For example, with each software release, we ensure that all tables are correctly calculated and presented according to the established methods from the European Sustainability Reporting Standards (ESRS).
ESRS regulations can change frequently. With this approach, Salacia Solutions maintains control over software quality during internal development and external changes. For our ISAE 3402 type 1 statement, accountancy firm Baker Tilly reviewed our control framework for completeness, accuracy, and correctness according to ISAE standards and approved it. The Type 2 statement now confirms that we are implementing all the measures we identified to prevent and detect any risks according to plan over a period of 6 months
