Helsinki, Finland — 31.3.2025 — Vapaus, the Nordic leader in employee scheme bikes, has achieved the internationally recognized ISO 27001 certification, marking a significant leap in its commitment to enterprise-level data security and international expansion strategy.
ISO certifications are granted only to companies that meet internationally recognized standards. The establishment, maintenance, and issuance of these standards are managed by the International Organization for Standardization (ISO).
"This certification validates our adherence to enterprise-level data security requirements and highlights our dedication to top-tier information security practices. As we expand to new markets, it provides assurance to our clients and partners that we strictly comply with international standards, allowing us to continue delivering the easiest and most reliable service globally," says Emilie Calmettes, Chief Product Officer of Vapaus.
Furthermore, the ISO 27001 certification aligns with key European regulations, including the NIS2 Directive and GDPR, both of which share common principles in cybersecurity and data protection. With this certification, Vapaus demonstrates its commitment to security and compliance, ensuring reliability for its customers and partners.
“As the amount of sensitive data we handle is growing every day, reliability and security have been at the core of our development practices from day one. Obtaining this certification is well-deserved proof that our team is continuously developing ways of working matching and exceeding the industry standards,” says Luc Gardon, Head of Engineering at Vapaus.
What Does the ISO 27001 Certification Mean for Vapaus Customers?
For employees: All Vapaus scheme bike users can continue to enjoy their bike commutes with confidence, knowing that their confidential personal data is handled and protected according to the highest industry standards. This strengthens protection against data leaks and other cybersecurity threats.
For employers: The ISO 27001 certification proves Vapaus' commitment to best cybersecurity practices while creating smoother third-party integration opportunities. Aligning with the NIS2 Directive and GDPR, this certification assures business customers that their employees can enjoy an easy and sustainable way of commuting while their data remains protected according to the industry’s best standards.
For partners: Strong cybersecurity is an essential requirement for sustainable partnerships. The ISO 27001 certification also assures Vapaus’ partners that the company takes data security seriously. It enhances the reliability of services and ensures that collaboration with Vapaus remains as seamless and secure as possible in the future as well.
"At Vapaus, we take pride in being a forerunner in ensuring business continuity and providing reliable services to our customers. Achieving the certification is a testament to our continuous effort to improve the quality and security of our services while preparing for international expansion," says Tero Era, CEO of Vapaus.
About Vapaus
Vapaus is an internationally recognized Nordic employee scheme bike specialist since 2020, employing over 50 experts internationally. In 2023, Vapaus helped reduce CO2 emissions by one million kilos and won the European Startup Prize for Mobility. Vapaus operates with a scalable business model, reflected in its remarkable growth from a revenue of €4.5 million in 2021 to an impressive €34.8+ million in the year 2024.
Vapaus has successfully automated the employee scheme bike process through its technology platform, covering payroll, invoicing, logistics, insurance, financing and third-party integrations. Vapaus strongly focuses on the circular economy through its innovative Precycled concept.
More than 1,700 organizations in Finland and Sweden have benefited from Vapaus’ services, with nearly 30,000 bicycles delivered to their employees. Vapaus will publish an extensive State of the Scheme Bikes user research on the impact of the bike scheme in May 2025.
Contacts
Mikko Ampuja, CEO, +358 50 306 7000 , mikko@vapaus.io
Emilie Calmettes, CPO, +358 40 661 3234, emilie@vapaus.io