Octave Compliance programs and certificates
Explore our certifications
Overview: International Security Standard
Applies to: INTERGRAPH ESPAÑA S.A
Description: IVAC-INSTITUTO DE CERTIFICACIÓN, certifies that the information systems assessed — all of them classified as HIGH category — and the related services of the private entity INTERGRAPH ESPAÑA S.A (Octave) have been audited and found to be in compliance with the requirements of Royal Decree 311/2022, of May 3, which regulates the National Security Framework (ENS Level HIGH), as detailed in the corresponding audit report dated October 1, 2025.
Overview: Nuclear Industry Standard
Applies to: Octave Aspect Pipe Stress (formerly CAESAR II), Octave Aspect Structure (formerly GT STRUDL)
Description: ASME Nuclear Quality Assurance (NQA-1) is a national consensus standard for quality assurance in the nuclear industry. The American Society of Mechanical Engineers (ASME) established the standard as the means to ensure compliance with the requirements of the nuclear industry.
Overview: Capital Facilities Information HandOver Specification Standard for Process Industries
Description: CFIHOS is a standard that originated in 2012 under the auspices of USPI and in 2020, governance was transferred to the International Association of Oil & Gas Producers (IOGP) – becoming the Joint Industry Project (JIP) 36. The specification applies across the value chain and includes information required to meet regulatory authority requirements. As such, we believe that CFIHOS provides a good platform for standardization of information requirements across the industry to reduce the uncertainty and costs of handovers, simplify the license to operate process and provide a basis for supporting interoperability and increased efficiency of work processes during the operations and maintenance phase of the facility life-cycle.
Overview: Security, Trust, Assurance and Risk Registry
Applies to: Octave Tempo Operating Procedures (formerly AcceleratorKMS), Octave Attune EAM (Formerly HxGN EAM), Octave InConcert (formerly HxGN SDx2), Octave Smart Cloud (formerly HxGN Smart Cloud), Octave Loop Material Readiness (formerly Jovix)
Description: The Security, Trust, Assurance and Risk (STAR) Registry is a publicly accessible registry that documents the security and privacy controls provided by popular cloud computing offerings.
STAR encompasses the key principles of transparency, rigorous auditing and harmonization of standards outlined in the Cloud Control Matrix (CCM).
Overview: Type Approval Certificate
Applies to: Attune EAM (formerly HxGN EAM) 12.x
Description: The Planned Maintenance System is approved for use onboard DNV classed vessels and offshore units with the in-operation notation PMS(M).
Overview: German Facility Management Association Directive
Applies to: Attune EAM (formerly HxGN EAM)
Description: GEFMA 444 is a guideline focused on facility management, particularly related to the implementation and certification of energy management systems in buildings and facilities. It was created by the German Facility Management Association (GEFMA) to promote sustainable and energy-efficient practices.
View Certificate (English)
View Certificate (Deutsch)
Overview: Industrial Automation Systems and Integration
Applies to: Attune EAM (formerly HxGN EAM)
Description: Octave has been an active member of POSC/Caesar and delivered the first ever POSC/Caesar data warehouse in 1997. POSC/Caesar initiated the development of the ISO 15926 standard "Integration of life-cycle data for process plants oil and gas production facilities," and its SmartPlant® Enterprise integrated solutions support ISO 15926. The underlying Octave Facets (formerly SmartPlant Foundation) data model has shared a common basis with ISO 15926 Part 2 since their joint origins and has evolved reflecting the ongoing development of this standard.
In addition to our support for ISO 15926 in our IM tools, Octave Forte Interop (formerly SmartPlant Interop Publisher) reads ISO15926 files for conversion to our 3D format for use in our 3D tools and Octave Facets P&ID (formerly Intergraph Smart P&ID) data into ISO15926 compliant .xml file.
Overview: International BIM Standard
Applies to: Attune EAM (formerly HxGN EAM), OpenCAD BIM
Description: ISO 19650 is an international standard that focuses on managing information related to the lifecycle of built assets using Building Information Modeling (BIM). This framework provides requirements and guidelines for organizing, sharing and collaborating on digital construction data.
Issued by: Schellman
Overview: International Security Standard
Applies to: Octave Tempo Operating Procedures (formerly AcceleratorKMS), Octave Attune EAM (Formerly HxGN EAM), Octave InConcert (formerly HxGN SDx2), Octave Smart Cloud (formerly HxGN Smart Cloud), Octave Loop Material Readiness (formerly Jovix), Octave Tempo Control System Effectiveness (formerly PAS)
Swindon UK, Huntsville, AL, USA
Description: ISO/IEC 27001:2022 is the international standard that provides the specification for an information security management system (ISMS). The standard is designed to help organizations manage their information security processes in line with international best practices. Octave's Information Security Management System provides: Regular evaluation of information security risks, taking into account the impact of threats and vulnerabilities. Design and implementation of a comprehensive suite of information security controls and other forms of risk management to address information security risks. An overarching management process to ensure that the information security controls continue to meet Octave's Cloud customers’ needs.
Issued by: TÜV Rheinland
Overview: International Security Standard
Applies to: The integrated management system, consisting of the quality management system and the information security management system of Octave
Description: The integrated management system, consisting of the quality management system and the information security management system of Octave, is certified by TÜV Rheinland of North America, Inc. according to the standards ISO 9001:2015 and ISO/IEC 27001:2022.
Issued by: LRQA
Overview: International Security Standard
Applies to: Information Security Management System of Octave
Description: The Information Security Management System of Octave has been approved by Lloyd's Register Quality Assurance to the following Information Security Management System Standard: ISO27001:2022 which also includes ISO 27017 for our cloud infrastructure.
Issued by: Schellman
Overview: International Security Standard
Applies to: Octave Tempo Operating Procedures (formerly AcceleratorKMS), Octave Attune EAM (Formerly HxGN EAM), Octave InConcert (formerly HxGN SDx2), Octave Smart Cloud (formerly HxGN Smart Cloud), Octave Loop Material Readiness (formerly Jovix) Swindon UK, Huntsville, AL, USA
Description: ISO/IEC 27017:2015 is the international standard that provides guidance on the information security aspects of cloud computing, recommending and assisting with implementing cloud-specific information security controls supplementing the guidance in ISO/IEC 27001. The scope of the Octave Information Security Management System also includes the ISO/IEC 27017:2015 (ISO 27017) extended control set and implementation guidance.
Issued by: Bureau Veritas
Overview: International Quality Standard
Applies to: Luciad NV
Description: Luciad NV consists of an R&D department producing, maintaining, and supporting the Luciad family of products and a Professional Services department delivering custom development services, training services, and consultancy services to customers of the Luciad family of products. The processes of both departments are in scope of the Luciad Quality Management System that has been certified to the ISO 9001 standard since 2009 by a BELAC accredited audit body.
Issued by:
Overview: International Quality Standard
Applies to: Intergraph Portugal S.A., Octave
Description: The quality policy of Intergraph Portugal S.A., of Octave, consists of:
To systematically satisfy our customers by meeting their requirements, both in terms of the products supplied and the service provided; because only satisfied customers ensure the company's existence.
Motivate and commit all agents/stakeholders (internal and external) to the dynamization of the QMS (Quality Management System) through systematic participation.
Ensuring the high level of competence of all employees and a climate that favors their commitment, technical development and excellent customer relations.
Continuously improving the efficiency of our operation, not only by reacting appropriately to failures, but also by anticipating potential problems.
Setting ambitious, more attainable goals and continuously monitoring procedural indicators in order to increase process performance.
Comply with all applicable legal, regulatory and normative requirements.
Publicize and communicate the quality policy to all agents/stakeholders.
Issued by: LRQA
Overview: International Quality Standard
Applies to: Octave Product Development
Description: The Quality Management System of Octave has been approved by Lloyd's Register Quality Assurance to the following Quality Management System Standards: ISO 9001:2015. The ISO 9001:2015 standard provides tools and guidance to help companies achieve effective quality management over products and services, meet customer requirements and consistently improve quality.
Issued by: SAI Global
Overview: International Quality Standard
Applies to: The Quality Management System of Octave, implemented by the Australian Intergraph Corporation Pty. Ltd.
Description: The Quality Management System of Octave, implemented by the Australian Intergraph Corporation Pty. Ltd., at the company site in Melbourne is certified by SAI Global Certification Services Pty Ltd. in accordance with the ISO 9001:2015 standard, applicable to the design, development, implementation and support of software products and services within Hexagon Safety, Infrastructure and Geospatial.
Issued by: SGS
Overview: International Security Standard
Applies to: ETQ / Reliance
Issued by: SOCOTEC
Overview: International Quality Standard
Applies to: Intergraph (UK) Limited, Octave
Description: Intergraph (UK) Limited, Octave operates a Quality Management System that has been certified by a UKAS accredited audit body to ISO 9001:2015 for the delivery of services including COTS Software, product development & Configuration, License management, consulting services and support across the British Isles.
Issued by: Swiss Safety Centre
Overview: International Quality Standard
Applies to: Quality Management System of Octave
Description: The quality management system of Octave, implemented by the Swiss entity HxGN Schweiz AG at the company site in Altstetten / Zurich, Switzerland, is certified by Swiss Safety Centre AG in accordance with the ISO9001:2015 standard.
Issued by: TÜV Rheinland
Overview: International Quality Standard
Applies to: Quality Management System of Octave
Description: The integrated management system, consisting of the quality management system and the information security management system of Octave, is certified by TÜV Rheinland of North America, Inc. according to the standards ISO 9001:2015 and ISO/IEC 27001:2022.
Issued by: BSI
Overview: International Security Standard
Applies to: The Information Security Management System of Octave's Capability Center India Pvt Ltd.
Description: The Information Security Management System of Hexagon's Capability Center India Pvt Ltd. is certified by the BSI Group India Pvt Ltd. in accordance with the ISO/IEC 27001:2022 standard for Hexagon R&D India comprising Hyderabad and Gujarat R&D centers. Hexagon R&D India is scoped for ALI, SIG, A&P, MI, Geo & Mining and Innovation Hub divisions for Product Center and Services.
Issued by: LRQA
Overview: International Security Standard
Applies to: Information Security Management System of Octave
Description: The Information Security Management System of Octave has been approved by Lloyd's Register Quality Assurance to the following Information Security Management System Standard: ISO27001:2022.
Issued by: SAI Global
Overview: International Security Standard
Applies to: The Information Security Octave in Australia
Description: The Information Security Management System of Octave in Australia is certified by the SAI Global Certification Services Pty. Ltd. in accordance with the ISO/IEC 27001:2022 standard for the provision of professional services and support on COTS software and local software development.
Issued by: SGS
Overview: International Security Standard
Applies to: ETQ / Reliance
Issued by: SOCOTEC
Overview: International Security Standard
Applies to: Intergraph (UK) Limited, Octave
Description: Intergraph (UK) Limited, Octave operates an Information Security Management System that has been certified by a UKAS accredited audit body to ISO 27001:2022 for the physical and logical protection of customer and company data and associated information assets in use, stored, accessed in the company office or remotely for the delivery of services including COTS Software, product development & Configuration, License management, consulting services and support across the British Isles.
Issued by: TÜV SÜD
Overview: International Security Standard
Applies to: The Information Security Management System of Octave, implemented by the Czech entity Intergraph CS s.r.o.
Description: The Information Security Management System of Octave, implemented by the Czech entity Intergraph CS s.r.o., at the company sites Praha and Brno, is certified by TÜV SÜD Czech s.r.o. in accordance with the ISO/IEC 27001:2022 standard.
Overview: North American Electric Reliability Corporation
Applies to: Attune EAM (formerly HxGN EAM)
Description: The NERC CIP standard, developed by the North American Electric Reliability Corporation, plays a crucial role in protecting the utility sector's critical infrastructure through cybersecurity regulations. Octave, a leading cloud service provider, is dedicated to upholding these standards by offering its customers the Attune EAM (formerly HxGN EAM) asset management software. Independently evaluated and found suitable for securely storing assets, this solution optimizes asset lifecycles while prioritizing data security through encryption, role-based access control and audit trails. Octave's commitment to transparency ensures that they work closely with customers to meet their unique security and reliability needs within the framework of NERC CIP standards, ultimately enhancing productivity and compliance.
Issued by: ACSC
Overview: International Security Standard
Applies to: Australian Intergraph Corporation Pty. Ltd., Octave
Description: We are “Network Partner” with the Australian Cyber Security Centre (ACSC), the Australian government lead agency for Cyber Security. This is the highest tier of partnership and enables us to engage with ACSC and other Australian organisations, business and its international government-level network, to share collective intelligence, technical expertise and capability to lift cyber resilience. Being a partner allows us to be at the forefront of any alerts and advisories for our clients, and also allows us to contribute and access a wide range of Cyber Security related technical information and mitigation strategies.
Issued by: AICPA
Overview: Customer financial reporting assurance
Applies to: Attune EAM (formerly HxGN EAM), Smart Cloud (formerly HxGN Smart Cloud)
Description: A System and Organization Controls (SOC) 1 audit report provides detailed information and assurance about service organization’s internal controls that are relevant to user entities’ financial reporting. These reports are issued in accordance with the American Institute of Certified Public Accountants (AICPA) reporting standards for Service Organizations. The SOC 1 reports are independent third-party examination reports that demonstrate how our systems and supporting processes maintain effective controls that may impact customers’ financial reporting environments. These reports help stakeholders understand the design and operating effectiveness of controls established to support accuracy, consistency and integrity in financial related processes.
*Specify Attune EAM (formerly HxGN EAM), Smart Cloud (formerly HxGN Smart Cloud)
Issued by: AICPA
Overview: Security, Availability and Confidentiality Report
Applies to: Octave Cloud
Description: A SOC 2 audit report provides detailed information and assurance about a service organization's security, availability, processing integrity, confidentiality and/or privacy controls, based on their compliance with the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria. Octave Cloud products’ System and Organization Controls (SOC) 2 Reports are independent third-party examination reports that demonstrate how our Cloud products achieve key compliance controls and objectives. The purpose of such reports is to help our Cloud products’ stakeholders understand the controls established to support operations and compliance. The scope of our Cloud products’ AICPA Trust Services Criteria includes security, availability and confidentiality.
Overview: Voluntary Product Accessibility Template (VPAT)
Applies to: Octave Sequence Enterprise (formerly EcoSys), Attune EAM (formerly HxGN EAM)
Description: A Voluntary Product Accessibility Template (VPAT) is a document that explains how information and communication technology (ICT) conforms to the accessibility standards outlined by Section 508 of the Rehabilitation Act which demonstrates Octave's digital inclusivity and commitment to web accessibility.