Technology group Wärtsilä has successfully achieved SOC 2 Type 1 compliance for its GEMS Cloud Connect software – formerly known as GEMS Fleet Director. This independent attestation confirms that Wärtsilä has effective security and operational controls in place for the GEMS platform, following completion of a comprehensive audit with Insight Assurance in September 2025. The certification reinforces confidence in Wärtsilä’s digital infrastructure and underscores a continued commitment to cybersecurity, data protection, and operational excellence for customers worldwide.

As a cloud-based platform, GEMS Cloud Connect offers a comprehensive suite of capabilities to maximise value from energy storage systems and hybrid energy fleets. To obtain the SOC 2 Type 1 report, Wärtsilä underwent an extensive third-party assessment that evaluated the design of internal controls related to security, availability, and processing integrity across the GEMS platform. Building on this milestone, Wärtsilä is now progressing toward a SOC 2 Type 2 audit – an additional certification that assesses the performance of these controls over time. The pursuit of the Type 2 report reflects Wärtsilä’s long-term commitment to continuous cybersecurity excellence in support of critical energy infrastructure globally.

“Trust and security are paramount when it comes to energy infrastructure”, said Luke Witmer, Vice President of Software Engineering for Wärtsilä Energy Storage. “Achieving SOC 2 Type 1 compliance is another way we reassure our customers that cybersecurity is ingrained in our products and processes. We are fully dedicated to protecting our customers’ data and the critical energy infrastructure they entrust to our solutions. Maintaining alignment with leading global standards positions the GEMS platform to meet the rising security expectations of customers and regulators, while supporting the resilience and reliability of the evolving energy ecosystem.”

The platform’s cloud architecture and layered security features – including encryption, user authentication, role-based access control, and detailed audit logging, enable customers to leverage advanced functionality without compromising on cybersecurity. GEMS Cloud Connect is already deployed across dozens of sites worldwide, empowering utility and industrial customers to safely scale up the use of energy storage and renewable assets as part of their journey towards decarbonisation.

This achievement builds on Wärtsilä’s established cybersecurity framework. The company operates under a Wärtsilä-wide Information Security Management System (ISMS), and its centralised business-critical applications hosting customer data conform to the ISO/IEC 27001:2022 standard. In addition, Wärtsilä’s GEMS Power Plant Controller (PPC) – a core component of the broader GEMS platform – is certified to both IEC 62443-4-1 and IEC 62443-4-2 cybersecurity standards. These internationally recognised certifications validate Wärtsilä’s secure development lifecycle processes and technical control system component requirements, further demonstrating the company’s commitment to safeguarding customer operations and data.

Achieving SOC 2 Type 1 compliance strengthens Wärtsilä’s cybersecurity posture and reinforces the company’s role as a trusted partner in digital energy infrastructure.