Company · Capability
Certifications, standards and experience.
An overview of the certifications, standards, education and experience available within Epix and its specialist partner network. It is written for partners, clients and public tenders, where the team has to be evidenced before any contract is signed.
What a partner or client checks before submitting a bid.
How to read this list
The certifications, standards and experience listed here exist within Epix and its vetted specialist partner network. We do not claim that every individual or every single company holds them, and we do not present partner references as our own.
For a specific project we assemble a team from people who match the client's requirements - and for each member we can provide evidence when the tender requires it.
Certification profiles
Cloud and infrastructure
Security
Project management
Media and streaming
Standards in the delivery structure
The following standards are in place at the level of organisations participating in our delivery structure. Which of them applies to a specific project depends on the team delivering it - we confirm this before we start.
Education and experience
The network includes people educated in computer science, software engineering, information technology, information systems, electrical engineering, computer engineering, economics with information systems, and UX/UI and design - up to master's and doctoral level.
Among them are specialists with more than 10, 15 and 20 years of professional experience.
Roles we can bring in
Sectors we have experience in
Evidence for tenders
Public procurement and larger tenders usually require evidence of people, references and standards. We assemble the team to match those requirements and prepare the documentation: CVs in the required format, certification records, reference confirmations and declarations.
If you are preparing tender documentation and need a view of the available team before submission, get in touch - we prepare that overview with no obligation.
What each standard actually covers
A standard's name in a bid says little. What matters to a client is what the standard requires of a supplier - set out below for each of the four present in our delivery structure.
ISO 9001:2015 - quality management
Standardised project management, documented processes, quality control of delivery, handling of deviations and complaints, supplier management, internal controls and performance measurement. Often a condition for participation in public tenders.
ISO/IEC 27001:2022 - information security
An information security management system: risk and access management, information classification, cryptography, backup and recovery, business continuity, incident management, audit trails, supply-chain security and secure software development.
ISO/IEC 27701 - privacy
An extension of the security standard for personal data: records of processing, controller and processor roles, privacy by design and by default, handling data-subject requests, retention policies, sub-processor management and personal-data incidents.
ISO/IEC 20000-1 - IT service management
The standard for the period after go-live: agreed service levels, incident and problem handling, change and release management, availability, capacity, continuity, escalation procedures and documented maintenance. Relevant for multi-year maintenance contracts.
Which of these applies to a given project depends on the team delivering it. We settle that before the start, not at bid submission.
Regulatory compliance
For public and regulated clients technical fitness is not enough - the solution also has to meet requirements set by legislation. We build for those at design time, not at acceptance.
- GDPR - personal data processing
- NIS2 - cybersecurity
- the Slovenian information security act
- the EU AI Act - use of artificial intelligence
- the individual client's own security requirements
In practice that means privacy and security by design, audit trails, risk and access management, data classification, retention policies, support for privacy impact assessments and documented security controls.
Cloud, infrastructure and security
The certification profiles available in the network cover both major cloud platforms at professional and expert level, plus containers, infrastructure as code and networking.
- AWS Certified Solutions Architect - Professional
- AWS Certified DevOps Engineer - Professional
- AWS Certified Security - Specialty
- AWS Certified Solutions Architect, Developer and SysOps Administrator - Associate
- Microsoft Certified: Azure Solutions Architect Expert
- Google Cloud, Kubernetes and Linux Foundation profiles
- HashiCorp Terraform
- Cisco - networking and network security
- ISC2, ISACA and Offensive Security - cybersecurity
What we cover on the security side
Security architecture
Designing secure systems, zero trust, network segmentation, identity and privileged access management, multi-factor authentication, encryption and secrets management.
Secure development
Security built into the development process: static and dynamic analysis, dependency review, a software bill of materials, container security and secrets scanning.
Security testing
Testing of web applications and interfaces, infrastructure review, vulnerability assessment, penetration testing and configuration review.
Incident response
Detection and analysis, containment, recovery, root-cause analysis and documentation - with digital forensics where needed.
Technology coverage
We list this because tenders often require the technology to be known in advance. Our choice of technology is not habit - if an integration solves the problem, a new application is not needed.
Backend
Java and Spring Boot, .NET and C#, Node.js and NestJS, Python with FastAPI and Django, PHP with Laravel and Symfony, Go, Kotlin.
Frontend
React and Next.js, Vue.js and Nuxt, Angular, TypeScript - business applications, portals, dashboards and admin systems.
Mobile
Swift and SwiftUI, Kotlin and Android, Flutter, React Native and Kotlin Multiplatform - including offline-first solutions, point of sale, and Bluetooth, QR and NFC integration.
Infrastructure
Docker, Kubernetes, Terraform, Linux, GitHub Actions, GitLab CI/CD and Jenkins - with monitoring, centralised logging, automated deployment and disaster recovery.
Data
PostgreSQL, MySQL, Microsoft SQL Server, MongoDB, Redis, Elasticsearch and vector databases - with migrations, data pipelines and optimisation.
Artificial intelligence
Language models, RAG and vector search, agents, document processing and OCR, classification and predictive models - with monitoring, guardrails and answer evaluation.
Integrations and authentication
- REST, SOAP, GraphQL and webhooks
- OAuth 2.0, OpenID Connect, SAML 2.0 and single sign-on
- ERP and CRM systems, and document management systems
- payment systems, banks and point-of-sale systems
- government and legacy systems
- devices, IoT and on-site hardware
Protected video and OTT
The network also holds Certified Widevine Implementation Partner status - a specialist competence in Google's content protection technology, required for work with premium video content.
- OTT, IPTV and video-on-demand platforms
- content protection with DRM
- HLS, MPEG-DASH, SRT and adaptive bitrate
- live TV, catch-up and start-over
- apps for Android TV, Apple TV, Roku, Tizen and webOS
Quality assurance as a separate function
When the same person writes the code and tests it, what gets tested is what they expected - not what a user will do. So we can staff a project with a quality team separate from development.
- certification profiles: Selenium WebDriver, Java and Playwright
- automated end-to-end and regression testing
- API testing
- load testing before a peak
- acceptance testing against pre-agreed cases
- testing built into the release process
The team we can assemble
For a project we assemble a team from people matching the client's requirements. Available are specialists with 5, 7, 10, 15 and more than 20 years of practice, and individuals with bachelor's, master's and doctoral degrees, including people with published research.
- solution, software and cloud architects
- technical and development leads
- backend, frontend and mobile developers
- AI and data engineers
- infrastructure, reliability and secure-development engineers
- cybersecurity specialists
- quality and test automation engineers
- UX/UI and product designers
- business analysts and project managers
- support staff after go-live
Project management is covered by PMI, Scrum and IPMA Level C profiles, allowing agile, waterfall or hybrid delivery - depending on what the client or the tender requires.
The systems we can take on
- large and government information systems
- enterprise applications and SaaS platforms
- ERP, CRM and document management systems
- portals, intranets and workflow systems
- mobile applications and point-of-sale systems
- AI and agent-based solutions
- commerce, booking and payment platforms
- streaming video and OTT solutions
- IoT solutions and analytics platforms
- business process automation
Related solutions
Sounds like your project?
Send us the project description, your existing system, the tender documents or the event date.