Interact is now Cyber Essentials certified

On 21 October 2026, Interact was certified under Cyber Essentials, the UK government-backed scheme that confirms an organization has the core technical controls in place to defend against the most common cyber attacks.

The certificate covers the whole of Interact, including Sideways 6, our idea management platform. It sits alongside the ISO 27001:2022 certification and SOC 2 Type II report our customers already rely on.

Interact’s Cyber Essentials certification covers every feature

Some organizations certify a single location or a separate network segment. That can be a legitimate choice, but it tells a buyer very little about how their own data is handled. Our certificate’s scope is “whole organization”: all staff, all office and remote working locations, and all devices and cloud services used to deliver and support the Interact platform.

The NCSC’s own requirements note that organizations which certify their whole IT infrastructure achieve the best protection.

What this means for Interact customers

An independent baseline. Cyber Essentials is assessed by an IASME-licensed certification body, meaning you never have to take our word that our commitment to cyber security is concrete.

Faster security reviews. Many security questionnaires and RFPs ask about Cyber Essentials by name. You can now reference our certificate directly, which should shorten that part of procurement.

Public sector requirements met. Under G-Cloud 15, Cyber Essentials became a requirement for suppliers in every lot, including cloud software providers. Our certification meets it.

A wider assurance picture. Cyber Essentials adds to our existing certifications rather than replacing them:

Assurance	What it tells you	Assessed by
ISO 27001:2022	We run a mature, risk-based information security management system	Accredited certification body, annual audit
SOC 2 Type II	Our security controls operated effectively over a sustained period	Independent CPA firm
Cyber Essentials	The five core technical controls are in place across the whole organization	IASME-licensed certification body

Advancing our cyber defences with the strongest AI models

Cyber Essentials confirms the fundamentals are in place. We also go looking for problems that the fundamentals may not catch.

Interact has joined Anthropic’s Cyber Verification Program, which gives verified security organizations access to Claude Mythos, the most powerful model Anthropic makes available for security work. We use it to test our own platform in Interact-controlled environments, so weaknesses are found and fixed before attackers can exploit them. No customer tenants or customer data are used in that testing, and findings go through our standard security release process.

This matters more as AI moves into the intranet. Our AI capabilities, including Cue, Conductor, and Interact MCP, work with tools such as Microsoft 365 Copilot, ChatGPT, and Claude. Our rule is simple: an AI agent must never be able to do more than the person it acts for.

As Tom Walters, VP Product at Interact, put it: “The intranet is now where AI meets your whole organization, and attackers have AI too.”

What comes next

Building on this new cyber credential, Cyber Essentials Plus goes further: an independent assessor tests our devices and systems hands-on to confirm the controls work in practice. We’re working toward it now.

For our current certifications and security documentation, visit Interact’s Trust Center.