How do you choose an IT or AI vendor? Who is accountable for quality, data security and how systems run after delivery? OPTI introduces new resources for these decisions, having obtained ISO/IEC 42001 certification from SRAC.
Artificial intelligence opens up opportunities but also considerable risks. AI applications access data from ERP, CRM, documents and internal workflows, which raises some questions: who controls access, who checks the results, what happens when AI gets it wrong?
At OPTI, in November 2026, we obtained ISO/IEC 42001 certification for our artificial intelligence management system, awarded by SRAC. It complements our ISO 9001 certification for quality management (since 2016) and ISO 27001 for information security (since 2024).
These three management systems structure how IT vendors develop and deliver projects. They are not an absolute guarantee: for example, Binance had all the required certifications during the recent attack in November 2026 (Source), but they are a baseline the client can verify for reassurance.
The new opti.ro: from business needs to delivery
We also launched the new OPTI website in November 2026, rebuilt around practical resources for the community and our clients.
How do you work with a software vendor?
We have detailed OPTI's collaboration models and guarantees: a 6-month warranty on delivered code, SLA (Service Level Agreement) levels, periodic audits and a continuity option for the client's critical systems.
Which AI applications are worth implementing?
The new AI applications library starts from the business function of AI modernization: information extraction, search, predictions, recommendations, generation and automation. We give examples from B2B sales and existing data integration, bringing together the guides we have published over the past year.
How do you prepare an AI project technically?
For the community, we have gathered in one place OPTI's guides, architecture diagrams and whitepapers, alongside Google Cloud, HubSpot and other technical resources. They provide up-to-date AI standards for CEOs, CTOs and other executive roles.
Continuous security after project delivery
We have also rewritten the cybersecurity and infrastructure page, with a focus on reducing the attack surface, monitoring, response and continuity. These phases express OPTI's conviction that in the new cyber risk landscape, business continuity is the main goal (see also our complete guide "Backup ≠ Continuity" below).
To assess your own cyber risk, here are three recent analyses we have published:
- 10 protection measures after PHP2Shell and "Black October": technical and organizational recommendations for SMEs (November 2026).
- Backup ≠ Continuity: a 12-week cyber resilience program: six phases, from inventory and audit to tested restore (August 2026).
- How to validate an AI vendor in the era of NIS2 and GDPR: security checks and due diligence before signing a contract (February 2026).
