Use Neuron achieve ISO 27001 for their Agentic AI platform in just 6 weeks, with support from The Scale Factory
Use Neuron build GenAI tools to help re-imagine business operations. Their main product, Compostable AI is essentially a SaaS platform, used to train, deploy, and run AI agents in production, on behalf of their enterprise customers. These agents are custom-built for each customer, following a consulting engagement by their team of expert data scientists.
The Challenge
AI Agents deliver their best results when they’re deeply integrated with customer information systems, but enterprise buyers are rightly protective of the platforms that hold their data assets. One such prospective buyer in the healthcare space wasn’t willing to commit unless Use Neuron could show that they were compliant with ISO 27001, an international standard for information security management.
The company’s broader goal is to redefine day-to-day business operations for the 2034 workplace and beyond, using agentic systems. Architectural decisions made today support three priorities: security, reliability, and enablement of rapid development velocity.
The Scale Factory: AWS Expertise
Neuron co-founder Mohamed Zamzam, a former AWS employee, had known of The Scale Factory since his time working as a Solutions Architect there. “In the Neuron team, we don’t have a huge amount of AWS expertise,” he told us. “Our customers expect a level of security, scalability, and reliability that we knew we’d need help to deliver on. We chose to work with The Scale Factory because of their SaaS Competency, and because we know they have experience working with startups like us”.
We deployed a Foundational Landing Zone built on top of AWS Control Tower, and integrated this with Use Neuron’s third party identity provider using AWS Identity Center. Each Compostable AI customer receives a brand new AWS account dedicated to them. Every account has security and governance controls deployed on creation, following standards we developed together. The entire flow is driven by Infrastructure as Code pipelines, so onboarding a new tenant takes minutes, not days.
The Compostable AI platform uses a selection of LLMs hosted by Amazon Bedrock, matched to each customer’s unique workload based on the strengths of each model. The software is developed in Python, building on the LangGraph framework and LangChain libraries. The software is deployed into a combination of Amazon EC2 (for data ingest) and AWS App Runner. Data is stored in Amazon S3, with Amazon Aurora Serverless databases used as a RAG source.
These components are all deployed on a per-tenant basis, with strict security boundaries configured to ensure data isolation in line with industry best practices, giving Neuron both the isolation enterprises require and the rapid release cadence a start-up needs.
ISO 27001 at Speed
With the foundational work delivered, the next step was to deploy compliance tool Vanta from the AWS Marketplace. Vanta made it quick and easy to establish an ISO 27001 Information Security Management System, a framework to help manage information assets securely.
We integrated Vanta with the Landing Zone in AWS, to provide continuous reporting on the platform’s compliance with the policies defined in the ISMS.
Use Neuron were able to pass their ISO 27001 audit within just 6 weeks of deploying Vanta. With their new certification on show, they were able to close a substantial deal with their prospective healthcare buyer.
What Use Neuron said...
It was a real pleasure working with The Scale Factory
From the initial consultation onwards, I was impressed by the structured and methodical approach adopted by the team. The solution delivered was instrumental in helping us achieve ISO 27001 certification, which was a key strategic goal for us.
Ongoing Support
Once our work was complete, we included three months of support. “The post-delivery support provided by The Scale Factory team was excellent,” Ewan Dawson, Use Neuron’s CTO, told us. “Being able to access help via our dedicated Slack channel saved hours, if not days of troubleshooting”.
“It was a real pleasure working with The Scale Factory,” he continued. “From the initial consultation onwards, I was impressed by the structured and methodical approach adopted by the team. The solution delivered was instrumental in helping us achieve ISO 27001 certification, which was a key strategic goal for us”.
What’s Next?
Use Neuron are an AWS Software Partner, and intend to use that partner relationship to go to market and engage customers with credibility as a supplier. As part of that journey, they’ll list their products on the AWS Marketplace.
We’ll work with them to integrate with the Marketplace APIs, and to assess the platform as part of a Foundational Technical Review.
