Technology Consulting · Remote & On-site
Secure software.
Guaranteed compliance.
US-based company (Miami) with presence in Spain. Legacy software refactoring, consulting, audit and training in international cybersecurity and AI standards.
About us
Experts who turn technology into competitive advantage
- Miami, USA · Spain
- CertiTrue LLC
CertiTrue LLC is a company specialised in legacy software refactoring, service development & consulting, auditing, and training, based on current international standards.
Our team has extensive experience in product development, service implementation, audits, certifications and professional skills development in critical areas such as information security, IT service quality, artificial intelligence, ENS, business continuity and other relevant regulations.
Our mission is to provide these services in a way that enables organisations to comply with international regulations and strengthen their internal processes.
What we do
Our services
Specialised solutions covering the technological, regulatory and strategic challenges of the modern enterprise.
- Cybersecurity
Cybersecurity
We bring our expert knowledge of complex technological environments to businesses and SMEs that rely on their technology assets as a core part of their operations.
- Basic cybersecurity advisory
- ISO 27001 / ENS certification preparation
- Advanced AI-powered protection
- Security plan tailored to your organisation
- Legacy Software
Legacy Software Refactoring
We modernise legacy systems without disrupting your operations. In-depth technical debt analysis, architecture review and gradual migration to current technologies.
- Technical debt audit
- Gradual migration to microservices
- Test coverage
- Full technical documentation
- Digital Transformation
Digital Transformation
Advisory that facilitates digitalisation and process efficiency improvement with a multidisciplinary approach, ensuring information security and privacy.
- 360° digital diagnosis
- Personalised transformation plan
- AI applied to business processes
- Process and operations optimisation
- Artificial Intelligence
Artificial Intelligence Advisory
An AI plan tailored to your organisation's needs. Know the investment required and the steps needed for responsible, regulation-compliant adoption.
- AI adoption plan
- Basic and advanced data analysis
- Use cases adapted to your business
- EU AI Act & ISO 42001 compliance
- Management Systems
Management System Implementation
We implement management systems compliant with ENS, ISO 27001, 27701, 42001, 22301 and DORA, adapted to each client's context and organisational maturity.
- Pre-implementation GAP Analysis
- Technical and organisational controls documentation
- ISO 27001 / 27701 / 42001 / 22301 / DORA / ENS
- Accompaniment through to certification
- External DPO
Data Protection Officer (DPO)
We take on the external DPO role with a preventive approach, regulatory compliance and proactive privacy and digital risk strategy.
- External DPO for any sector
- Activity records and impact assessments
- Data subject rights management
- Proactive privacy strategy
- CISO / CTO as a Service
CISO / CTO as a Service
We provide the technology and security leadership your organisation needs, without the cost of a full-time hire. Strategic security and technology direction adapted to your growth pace.
- External CISO: security strategy & governance
- External CTO: architecture, roadmap & tech team
- Vendor and third-party management
- Representation before auditors and regulators
- FinOps
Cost Reduction & FinOps
We analyse and optimise your organisation's technology spend — licences, cloud infrastructure, vendors and processes — to free up budget without sacrificing performance or security.
- Technology & licence cost audit
- Cloud infrastructure optimisation (AWS, Azure, GCP)
- IT financial governance (FinOps Framework)
- Measurable and sustainable savings plan
- Training
Accredited Specialist Training
Professional training in ISO standards, ENS, NIS2 and digital governance, with accredited programmes oriented towards team and professional certification.
- ISO 27001, 27701, 42001, 22301, ENS, NIS2
- Certification-oriented training
- Accredited programmes for teams
- Cybersecurity & privacy awareness
- Privacy
Privacy Management (GDPR)
We bring our expertise in Privacy Management System implementation to organisations. We translate legal and technological complexity into understandable business language.
- GDPR compliance
- Records of processing activities
- Data Protection Impact Assessment (DPIA)
- Ongoing privacy advisory
Our team
Corporate capabilities
The technical and regulatory expertise of our team — the deep knowledge behind every service we offer.
Cybersecurity & Regulatory Compliance
- Security audits (OWASP, NIST, ISO 27001)
- ENS, NIS2, GDPR and European regulatory compliance
- TISAX — information security in the automotive sector
- ISO 27001 — Information Security Management System
- UNE 71505-1 — electronic evidence and digital chain of custody
- ISO 20000-1 — IT Service Management
- ISO 22301 — Business continuity and operational resilience
- Threat modelling and risk management
- Incident response planning
- Cybersecurity training and awareness
Artificial Intelligence & Governance
- EU AI Act compliance audits
- ISO 42001 — AI Management System
- AI system risk classification and assessment
- Algorithmic impact assessment
- Model governance, traceability and transparency
- Responsible use and interpretability policies
- AI integration in regulated processes
Legacy Software & Architecture
- Legacy system refactoring and modernisation
- Gradual migration to microservices and cloud
- Software architecture and scalable system design
- Technical debt and code quality audit
- DevOps, CI/CD and delivery automation
- Digital transformation without operational disruptions
Web & Application Development
- Backend with PHP, Laravel, Python, Java and Node.js
- Frontend with HTML5, CSS3, JavaScript, TypeScript, Angular and Vue
- MySQL and SQL database design and management
- REST API integration (JSON) and map visualisation with Leaflet
- DevOps: Git, GitHub, Docker and Linux server deployment
- Agile methodology, requirements management and technical documentation
Our difference
Why choose us?
Proven experience
Real projects in regulated sectors: banking, healthcare, public administration and technology.
Up-to-date regulatory knowledge
We closely follow ENS, NIS2, ISO 27001, GDPR and the EU AI Act so you're never caught off guard.
No operational disruptions
Our gradual approach ensures your business keeps running throughout the entire transformation.
Remote & on-site when needed
We work with any company in Spain, Europe and worldwide, remotely. When the project requires it, we travel to the client.
Talk to us
Ready to take the next step?
Tell us your situation and we'll give you an initial assessment with no obligation. The first consultation is free.
- Free initial consultation, no commitment
- Response within 24 hours
- Remote service with on-site presence when needed
- Adapted to your sector and applicable regulations
Enquiry received!
We've saved your message and will get back to you as soon as possible.