Setting the standard in shared mobility: ATOM Mobility achieves ISO 27001 and ISO 27701 certifications

Setting the standard in shared mobility: ATOM Mobility achieves ISO 27001 and ISO 27701 certifications

At ATOM Mobility, trust has always been one of the foundations of our platform. Every day, mobility operators ranging from small operators to entreprises around the world rely on us to manage their fleets, customer data and day-to-day operations. That's why we're proud to announce that ATOM Mobility has officially achieved both ISO 27001 and ISO 27701 certification.

These internationally recognized standards demonstrate our commitment to protecting information, managing cybersecurity risks, and ensuring privacy is built into every aspect of our platform.

What do these certifications mean?

ISO 27001 is the leading international standard for information security management. It confirms that ATOM Mobility has implemented a comprehensive Information Security Management System (ISMS) with processes designed to identify, assess, and mitigate security risks across the organization.

ISO 27701 extends this framework by focusing specifically on privacy information management. It validates that we have established robust processes for handling personal data responsibly, transparently, and in accordance with internationally recognized privacy practices.

Together, these certifications provide independent verification that security and privacy are embedded into how we build, operate, and continuously improve our software.

Why this matters for our customers

Mobility platforms process sensitive operational and customer information every day, from user accounts and payment data to fleet operations and business analytics. Protecting this information is not just a technical requirement - it's a responsibility. The certification scope covers ATOM Mobility's SaaS platform and the internal processes used to develop, operate, and support it.

For our customers, this provides additional confidence that:

  • Information security is managed according to internationally recognized best practices.
  • Customer and personal data are protected through well-defined privacy controls.
  • Risks are continuously assessed, monitored, and improved.
  • Security is integrated into our development and operational processes and not added as an afterthought.
  • Our security and privacy practices are independently audited and continuously improved.

Whether you're launching a new shared mobility service or operating thousands of vehicles across multiple cities, you can rely on ATOM Mobility to support your business with a platform built around security, privacy, and reliability.

More than a certification

Achieving ISO 27001 and ISO 27701 wasn't simply about passing an audit.

It required months of reviewing internal processes, strengthening security controls, documenting procedures, training our team, and ensuring that security and privacy are integrated throughout the organization. While the certifications mark an important milestone, they also represent an ongoing commitment.

Maintaining these standards means continuously evaluating risks, improving processes, and adapting to an evolving cybersecurity landscape. For us, this is not the finish line it's another step in building a platform our customers can trust for years to come.

A special thank you to TestDevLab

This achievement would not have been possible without the expertise and guidance of TestDevLab, who supported us throughout the preparation and certification process.

From helping us assess our existing processes to providing practical recommendations and guiding us through the audit journey, their team played an important role in helping us reach this milestone.

"ATOM Mobility approached certification the right way - not as a compliance exercise, but as a chance to formalise and strengthen how they handle customer data. That mindset is what made the process efficient, and it's what will keep the certification meaningful long after the audit."

"For any SaaS platform handling operational and personal data at scale, security and privacy can't be an afterthought bolted on before a procurement review. ISO 27001 and ISO 27701 give companies a common language for proving that data protection is built into how the business runs - the processes, the controls, the accountability. Increasingly, that's not a competitive advantage; it's the baseline customers and regulators expect."

We're grateful for their professionalism, knowledge, and partnership throughout this project.

Looking ahead

As shared mobility continues to grow, so do expectations around cybersecurity, privacy, and compliance. Operators, cities, enterprise customers, and public authorities all expect technology providers to meet the highest standards when it comes to protecting sensitive information.

Achieving ISO 27001 and ISO 27701 reinforces our commitment to delivering a secure, reliable, and privacy-focused platform for mobility operators worldwide.

We'd like to thank our customers, partners, and team members for their continued trust. We'll keep investing in security, privacy, and operational excellence so you can focus on growing your mobility business with confidence.

Ready to build a secure mobility service?

Whether you're launching a new shared mobility operation or scaling an existing fleet, security and privacy should never be an afterthought. At ATOM Mobility, we're committed to providing a platform that combines enterprise-grade security with the flexibility operators need to grow.

If you'd like to learn more about our platform or see how ATOM Mobility can support your business, book a demo with our team. We'll show you how our software helps operators around the world launch, manage, and scale successful mobility services backed by internationally recognized security and privacy standards.

Ask AI for an article overview
Let AI explain why entrepreneurs choose ATOM Mobility
Interested in launching your own mobility platform?

Related posts

More case studies

View allView all case studies
Blog
5 new ATOM Mobility features to help you capture demand and run a more efficient fleet
5 new ATOM Mobility features to help you capture demand and run a more efficient fleet

🚀 ATOM Mobility ships 7-15 new features every month, alongside smaller improvements and fixes. Explore five recent highlights: unmet demand heatmaps, automated fleet tasks, field-team performance tracking, new subscription types, and lock-screen ride updates - helping operators run more efficient fleets and improve the rider experience.

Read post

Knowing where customers need vehicles, keeping field teams productive, and giving riders reasons to return are everyday priorities for mobility operators. Every month, ATOM Mobility ships 7-15 new features, alongside smaller improvements and fixes. Here are five highlights from our recent releases - and how they can help operators improve fleet performance and the customer experience.

1. See where demand goes unmet

A customer opens your app, finds no vehicle nearby, and leaves. Your ride history alone won’t show you that missed opportunity.

The Unmet Demand heatmap highlights areas where users open the app but cannot find an available scooter, bike, or car within 1000 metres radius. Beyond colour-coded hexagons, on zoomed in view it shows the number of unique users who searched for a vehicle in each area without finding one nearby.

Use these insights to identify gaps in fleet coverage, prioritise rebalancing, and assess potential parking locations. Alongside seeing where rides happen, you can now understand where potential demand goes unmet.

Unmet demand heatmap

2. Automatically create tasks when vehicles need attention

Keeping a fleet ready for customers means staying on top of maintenance, charging, refuelling, and service quality. As your fleet grows into hundreds of vehicles, manually tracking when each vehicle needs attention becomes increasingly time-consuming.

Task Manager automations turn vehicle usage, condition, and ride feedback into actionable tasks. Operators can configure tasks to be created:

  • After a defined number of rides, kilometres, or hours.
  • When battery or fuel levels fall below a chosen threshold.
  • When the average rating of the last three rides falls below a set value.
  • When the average distance of the last three rides falls below a set value.
  • When a vehicle enters Rebalancing status.

These rules can support routine maintenance, trigger charging or refuelling tasks, and flag vehicles for inspection after low ratings or unusually short rides. For rebalancing tasks, if a customer uses the vehicle before collection, the task is automatically removed. This reduces manual monitoring and helps your team respond to vehicles that need attention.

Task Manager automations

3. Understand how your field operations perform

How long do tasks take? Where does your team spend its time? Which operational bottlenecks need attention?

New Shifts and Operator Performance views give vehicle sharing and digital rental operators visibility into shift status and duration, distance driven, completed tasks, and average time per task.

Managers can use these insights to investigate delays, improve routes, and identify training needs. For example, longer task completion times could prompt a closer look at travel distances, workload, or the processes used at each location. Comparing results alongside task types and working conditions helps turn performance data into practical operational improvements.

Performance tab of task manager

4. Give frequent riders more reasons to return

Different customers have different riding habits. Your subscriptions should reflect that.

ATOM Mobility now supports two additional subscription types:

  • Percentage discount subscriptions: apply a fixed percentage discount to eligible trips during the subscription period.
  • Fixed ride fee subscriptions: give qualifying trips up to a specified duration a flat price.

These options let operators design offers around frequent riders and short-distance commuters. For example, you could offer subscribers a percentage discount on eligible rides or a predictable flat fee for qualifying short trips. Operators gain more flexibility to test offers that encourage repeat usage while fitting their pricing strategy.

2 new subscription types available

5. Keep ride information visible on the lock screen

Checking an active trip should be simple.

Live Activity lets customers view key ride information directly on their phone lock screen without repeatedly opening the app. Depending on the service, this can help them follow an active ride or a driver’s arrival.

Making this information readily accessible gives customers a more convenient way to stay informed throughout their journey.

Live activity in action

Put these features to work for your fleet

These five releases are part of ATOM Mobility’s ongoing product development, helping operators identify unmet demand, automate routine coordination, understand field-team performance, and improve the customer experience.

Exploring software for your mobility business? Book a demo to see how ATOM Mobility can support your fleet, team, and customers.
Explore more product updates at https://www.atommobility.com/atomupdates

Blog
Who will operate Europe’s robotaxi fleets?
Who will operate Europe’s robotaxi fleets?

🤖 Who will actually operate Europe’s robotaxi fleets? Autonomous driving may remove the driver, but it doesn’t remove the work behind the car. Robotaxis still need charging, cleaning, maintenance, depots, customer support and someone managing the fleet every day. Early projects in Zagreb, Madrid and London illustrate different stages of deployment and how AV technology providers, fleet operators and booking platforms can work together. Taxi, rental and car-sharing companies already handle many of these tasks. What would it take to turn that experience into an autonomous fleet business?

Read post

For a taxi fleet owner, autonomous vehicles may seem to remove the most important part of the current business – the driver. But even without drivers, someone still needs to take care of the cars. They need to be owned or financed, charged, cleaned, inspected and repaired. Someone also needs to manage depots, deal with incidents, help customers and make sure enough cars are available.

The first robotaxi services and tests in Europe are already showing how this could work. The company that develops the autonomous driving technology does not always own or operate the cars. The app where customers book their rides may come from another company too. This could leave an important role for taxi, rental, car-sharing and other fleet companies that already know how to manage vehicles.

What changes when the driver disappears?

A taxi company today manages both cars and drivers. Drivers need to be recruited, scheduled, paid and supported. With a driverless fleet, these tasks would eventually disappear, but most of the work related to the cars would stay.

Autonomous cars still need charging or refuelling, cleaning, tyres, inspections, repairs and insurance. They also need somewhere to park when they are not working. If there is an accident or a technical problem, someone needs to deal with it and get the car back on the road. Customer support is still needed too when there are problems with bookings or payments, or when someone leaves something in the car.

Some of these tasks may even become more important. Robotaxis are expensive, and every hour a car spends charging, being cleaned or waiting for maintenance is an hour when it cannot take passengers. Moove, for example, already provides fleet ownership, depots, charging, maintenance and 24/7 operations for autonomous vehicles.

Drivers also do more than drive: they notice damage, report faults, help passengers and respond when something goes wrong. Without a driver, these responsibilities need clear processes and dedicated support. Existing fleet experience is an advantage, but operators will need to adapt it to vehicles running without someone behind the wheel.

Who actually runs a robotaxi service?

There can be several companies behind one robotaxi ride. One provides autonomous driving technology, another may own the cars, and a local company can take care of the fleet. A platform such as Uber can then connect the cars with passengers. Sometimes one company may do several of these things, but this is not always the case.

Zagreb is one example. Pony.ai provides the autonomous driving system, Verne owns and operates the fleet, and Uber connects it with customers through its app. Autonomous rides became commercially available through Uber in August 2026 with a licensed operator onboard. On 10 September, Pony.ai and Verne also started fully driverless passenger test rides on a 22-kilometre route connecting parts of Zagreb with the airport. These are still limited test rides, not a fully driverless service across the whole city.

A similar model is being tested in Madrid. WeRide, Uber and AVOMO received permission in September 2026 to start testing and mapping under Spain’s ES-AV framework. The first 20 vehicles have an onboard specialist. WeRide provides the autonomous technology, Uber connects the cars with passengers, and AVOMO takes care of fleet operations. Commercial operations are planned for later in 2026, but the current permit is for testing and preparation rather than a general driverless taxi service.

In London, Wayve and Uber launched supervised autonomous passenger rides in September 2026. Customers can be matched with an autonomous vehicle through the Uber app, but there is still a licensed driver in the car.

Europe is preparing for larger robotaxi fleets

The plans for the next few years are already much bigger. Pony.ai and Uber announced in August 2026 that they plan to deploy more than 2,000 robotaxis in Europe, starting with Zagreb and later expanding to four more European cities.

Bolt and Lucid announced another partnership in September, with Bolt aiming to deploy at least 25,000 autonomous Lucid vehicles across European cities. This is a future target, not 25,000 cars already operating today.

How these fleets are owned and operated may also be different from one city to another. Local regulations, available vehicles, charging and depot infrastructure and partnerships will all have an effect on how each service is set up.

Who will operate Europe’s robotaxi fleets?

What could this mean for taxi companies?

Taxi companies already do many of the things that would still be needed with an autonomous fleet. They maintain cars, deal with insurance and incidents, provide customer support and make sure enough vehicles are available. Some also already have their own depots, charging infrastructure or maintenance partners.

One possible model can already be seen in Zagreb. A local company owns and operates the autonomous fleet, while a larger ride-hailing platform brings customers. In the future, an existing taxi company could potentially have a similar role. Instead of managing cars and drivers, it could manage autonomous cars that receive bookings through a larger platform.

This does not mean platforms such as Uber will always rely on other companies to own the cars. Uber’s 2026 agreement with Rivian includes up to $1.25 billion in milestone-dependent investment and says that Uber or its fleet partners may purchase the autonomous vehicles. Uber is also developing infrastructure for autonomous fleets. Different ownership models are therefore possible.

What about rental and car-sharing companies?

Autonomous vehicles could also become interesting for rental and car-sharing companies, although this is probably further in the future. These businesses already manage vehicles, maintenance, cleaning, charging, bookings, customer accounts and payments, so much of the practical work is similar.

Autonomous driving could also change how rental and sharing cars are moved. Today, an employee may need to drive a car from one location to another. In the future, the vehicle could potentially do this itself within an area where autonomous driving is approved. It could even become possible for a rental car to drive itself to a customer’s pickup point.

How do you measure a robotaxi fleet?

Without drivers, it becomes especially important to understand how much time each vehicle is actually working. Every hour spent charging, being cleaned, waiting for maintenance or simply sitting unused means less time carrying paying passengers.

Some useful KPIs could be available hours per vehicle, paid trips per vehicle each day, revenue per available vehicle/day, empty kilometres, charging and maintenance downtime, cost per trip and incidents that need human help. These are most popular robotaxi industry KPIs of what a company could measure during a pilot.

For example, if cars spend too much time waiting to charge, the charging setup may need to change. A lot of empty kilometres could mean the cars are not in the right places, while too much maintenance downtime could make a vehicle more expensive to operate.

How could local companies enter the market?

For either model, the business case depends on the partnership terms: who finances the vehicles, who carries the risk when demand is low, and how revenue and operating costs are shared. Operators should assess what remains after vehicle financing, insurance, charging, maintenance and partner fees. Depots, local service teams and reliable fleet availability could make an operator a valuable partner, but profitability still needs to be demonstrated.

One option for taxi fleets would be to work with an autonomous driving company and a larger ride-hailing platform. The local company could own or manage the cars and take care of the fleet, while customers book their rides through the larger platform.

Another option could be possible in cities where large ride-hailing platforms are not present or have limited coverage. A local company could work with an approved AV provider while using its own app, bookings, payments, customer support and fleet management.

In both cases, a company cannot simply buy autonomous cars and start offering rides. The technology needs to be approved, and local rules have to allow the service. These rules will also be different across Europe. Great Britain, for example, introduced its Automated Passenger Services permitting framework in 2026. Services similar to taxis or private hire vehicles need consent from the relevant local authority, while responsibility for the autonomous driving technology and the passenger service are treated separately.

What can fleet companies do now?

A company does not need to have autonomous cars today to start preparing. A good first step is understanding the current fleet in detail – what each vehicle costs, how many hours it is available, how much time it spends charging or being repaired, and when cars are used the most.

Charging, cleaning, maintenance and depot processes are also worth looking at because all of these will still be needed with autonomous vehicles. A company interested in an AV pilot can then choose a location and use case, look at the local permit process and start talking to autonomous driving technology providers.

The software will also need some preparation. Customers still need to book and pay for rides, while the company needs fleet information, customer support, reporting and connections between its own systems and the AV technology. Starting with a small pilot makes it possible to test all of this before trying to build a larger service.

Where could ATOM Mobility fit?

ATOM Mobility already provides many of the software functions used by taxi, ride-hailing, rental and sharing companies, including customer apps, bookings, payments, fleet management, maintenance tasks, analytics and APIs. Its ride-hailing software includes passenger and driver apps, dispatch, payments, fleet data, analytics and integrations. The ATOM Mobility API can also exchange data about vehicles, bookings, rides, payments, telemetry and maintenance tasks.

ATOM Mobility does not provide autonomous driving technology. This would come from a specialised AV company, and each project would have its own technical requirements and local approvals. For an AV pilot, ATOM Mobility could work with the fleet company and AV provider on the rider experience, integrations, fleet management and the data needed to measure how the pilot is working.

If you operate a taxi, rental or sharing fleet and want to explore an AV pilot,  ATOM Mobility can help plan the booking and fleet-management setup, integrations and metrics you would need to test together with an AV technology partner.

Launch your mobility platform in 20 days!

Multi-vehicle. Scalable. Proven.