Every layer, measured — down to the code
Finarium's platform is certified to ISO/IEC 5055:2021 — the international standard for measuring the structural quality of software at the source code level.
What is ISO/IEC 5055?
This is an international standard published by the International Organization for Standardization, developed originally by the Consortium for Information & Software Quality (CISQ) and the Object Management Group (OMG).
ISO/IEC 5055 defines a structured, automatable method for detecting and counting specific architectural and coding weaknesses — the kind that create serious operational risk or expensive failures later, even when a system appears to work correctly on the surface.
In practice, this means ISO/IEC 5055 evaluates a platform the way a structural engineer evaluates a building: not by how it looks from the outside, but by inspecting the framework that holds it up.
What it measures
Four characteristicsISO/IEC 5055 evaluates software against four business-critical quality characteristics, each drawn from the broader ISO/IEC 25010 software quality model.
Security
Identifying structural vulnerabilities that could serve as an entry point for attacks — weaknesses penetration testing alone often misses.
Reliability
Measuring the risk of failures, crashes, and outages — a critical factor for any platform expected to move money without interruption.
Performance efficiency
Assessing whether the code architecture holds up under real-world, high-volume load.
Maintainability
Evaluating whether a system can be safely updated over time, without accumulating unsafe technical debt.
Finarium's certification
Certificate of complianceNo. ITSM/5E89/1225, issued to Finarium S.A. by Quality Control Certification (QCC), accredited by UASL, England.
Providing financial services — the certificate covers the platform through which those services are delivered, not a single component of it.
Certificate of compliance · open full size