ISO 9001 · Quality
Deliver what we promise. Defined processes from customer requirements through development, release gates, delivery and support, with continual improvement built in.
DEVlink / Company / Quality & securityEngineering you
QUALITY, SECURITY & ENVIRONMENT
Engineering you
can rely on.
How DEVlink manages quality, information security and environmental impact, and how we prepare our software for the EU Cyber Resilience Act. Stated plainly, including what is still in progress.
Read our policy ↗Ask about supplier qualification ↗ONE INTEGRATED MANAGEMENT SYSTEM
Quality. Environment.
Information security.
DEVlink is building one integrated management system for the way we develop, license, deliver and support engineering software and test hardware for simulation, verification and EV-charging communication, together with our engineering services.
ISO 14001 · Environment
Understand and reduce the environmental impact of how we work, what we buy and what we deliver, and meet our environmental obligations.
ISO/IEC 27001 · Information security
Protect customer and company information, and build security into products and development from the start.
Status
We are not certified yet. Certification audit planned for 2027. Our quality, environment and information security policy is approved and published. DEVlink will not claim certification until an accredited certification body has issued a certificate. Read the policy ↗
EU CYBER RESILIENCE ACT
Secure by design.
Supported after delivery.
The Cyber Resilience Act (Regulation (EU) 2024/2847) sets cybersecurity requirements for products with digital elements placed on the EU market. Reporting obligations for actively exploited vulnerabilities apply from 11 September 2026. The full requirements apply from 11 December 2027. We are preparing ChargeLink, DEP and our other products now.
Know what is inside
A software bill of materials (CycloneDX SBOM) is produced for every release, so components and their versions are known and traceable.
Watch continuously
Third-party components are checked against public vulnerability databases every week and at every release gate. Findings are tracked to resolution in a vulnerability register.
Handle vulnerabilities responsibly
A coordinated vulnerability disclosure process, with security updates free of charge for every licence type.
WHERE WE ARE
In place.
In progress.
In place
- Approved integrated policy for quality, environment and information security
- SBOM for every release
- Weekly vulnerability monitoring and a release gate
- Vulnerability register and coordinated disclosure policy
- Process for reporting actively exploited vulnerabilities as the CRA requires
In progress
- Public security page and security.txt
- Code signing for delivered releases
- CRA technical documentation, EU declaration of conformity and CE marking, planned for 2027, before 11 December 2027
- Internal audits and management review ahead of the 2027 certification audit
FOR SUPPLIER QUALIFICATION
The practical questions.
Is DEVlink ISO certified?
Not yet. We are implementing one integrated management system for ISO 9001, ISO 14001 and ISO/IEC 27001. The certification audit is planned for 2027. Our policy is published at devlink.se/quality.
Can you answer our supplier or security questionnaire?
Yes. Send it to sales@devlink.se and tell us the deadline. We answer from the management system and say where something is still in progress.
How do I report a security vulnerability?
Until our public security page launches, email sales@devlink.se with “Security” in the subject. We will agree a secure channel before you send details. Never test against chargers or vehicles in public use.
Do security updates cost extra?
No. Security updates are free of charge for every licence type.
Is ChargeLink or DEP CE marked under the CRA?
Not yet. Technical documentation, the EU declaration of conformity and CE marking are planned for 2027, before the CRA’s full requirements apply on 11 December 2027.
At a glance.
- Standards
- ISO 9001 · ISO 14001 · ISO/IEC 27001
- Certification
- Not certified yet · audit planned for 2027
- Policy
- devlink.se/quality
- Cyber Resilience Act
- SBOM per release · vulnerability monitoring · free security updates
- Legal entity
- devLink AB · 556964-5210
- Contact
- sales@devlink.se
YOUR NEXT MOVE
Qualifying a new supplier?
Tell us what your process needs. We will answer plainly and show what is in place.