Technology group Wärtsilä has successfully achieved SOC 2 Type 1 compliance for its GEMS Cloud Connect software – formerly known as GEMS Fleet Director. This independent attestation confirms that Wärtsilä has effective security and operational controls in place for the GEMS platform, following completion of a comprehensive audit with Insight Assurance in September 2025. The certification reinforces confidence in Wärtsilä’s digital infrastructure and underscores a continued commitment to cybersecurity, data protection, and operational excellence for customers worldwide.
As a cloud-based platform, GEMS Cloud Connect offers a comprehensive suite of capabilities to maximise value from energy storage systems and hybrid energy fleets. To obtain the SOC 2 Type 1 report, Wärtsilä underwent an extensive third-party assessment that evaluated the design of internal controls related to security, availability, and processing integrity across the GEMS platform. Building on this milestone, Wärtsilä is now progressing toward a SOC 2 Type 2 audit – an additional certification that assesses the performance of these controls over time. The pursuit of the Type 2 report reflects Wärtsilä’s long-term commitment to continuous cybersecurity excellence in support of critical energy infrastructure globally.
“Trust and security are paramount when it comes to energy infrastructure”, said Luke Witmer, Vice President of Software Engineering for Wärtsilä Energy Storage. “Achieving SOC 2 Type 1 compliance is another way we reassure our customers that cybersecurity is ingrained in our products and processes. We are fully dedicated to protecting our customers’ data and the critical energy infrastructure they entrust to our solutions. Maintaining alignment with leading global standards positions the GEMS platform to meet the rising security expectations of customers and regulators, while supporting the resilience and reliability of the evolving energy ecosystem.”
The platform’s cloud architecture and layered security features – including encryption, user authentication, role-based access control, and detailed audit logging, enable customers to leverage advanced functionality without compromising on cybersecurity. GEMS Cloud Connect is already deployed across dozens of sites worldwide, empowering utility and industrial customers to safely scale up the use of energy storage and renewable assets as part of their journey towards decarbonisation.
This achievement builds on Wärtsilä’s established cybersecurity framework. The company operates under a Wärtsilä-wide Information Security Management System (ISMS), and its centralised business-critical applications hosting customer data conform to the ISO/IEC 27001:2022 standard. In addition, Wärtsilä’s GEMS Power Plant Controller (PPC) – a core component of the broader GEMS platform – is certified to both IEC 62443-4-1 and IEC 62443-4-2 cybersecurity standards. These internationally recognised certifications validate Wärtsilä’s secure development lifecycle processes and technical control system component requirements, further demonstrating the company’s commitment to safeguarding customer operations and data.
Achieving SOC 2 Type 1 compliance strengthens Wärtsilä’s cybersecurity posture and reinforces the company’s role as a trusted partner in digital energy infrastructure.
Media contact for more information on this release:
Amanda Young
Director, Marketing & Communications
Wärtsilä Energy Storage
amanda.young@wartsila.com
Image description: Copyright: AICPA SOC 2® Type 1 – SOC for Service Organizations: Trust Services Criteria (Reporting on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity).
All Wärtsilä releases are available at www.wartsila.com/media/news-releases and at news.cision.com/wartsila-corporation where also the images can be downloaded. Use of the image(s) is allowed only in connection with the contents of this press release. Wärtsilä images are available at www.wartsila.com/media/image-bank.
Wärtsilä Energy Storage in brief
Wärtsilä Energy Storage is at the forefront of the transition towards a 100% renewable energy future. We help customers accelerate global decarbonisation efforts by combining proven technologies with deep grid expertise. Our portfolio includes high-performance hardware, intelligent controls and optimisation software, and full-service lifecycle support to deliver lasting value across the project lifespan. From enhancing grid stability to unlocking flexibility and operational efficiency, our utility-scale battery energy storage solutions are built for real-world performance. Trusted by top-tier utilities, developers, and system operators, Wärtsilä Energy Storage has a global footprint across 130+ sites—delivering the scale, safety, and reliability needed to power the energy transition.
www.wartsila.com/energy
Wärtsilä in brief
Wärtsilä is a global leader in innovative technologies and lifecycle solutions for the marine and energy industries. We emphasise innovation in sustainable technology and services to help our customers continuously improve environmental and economic performance. Our dedicated and passionate team of 17,900 professionals in 199 locations in 78 countries shape the decarbonisation transformation of our industries across the globe. In 2025, Wärtsilä’s net sales totalled EUR 6.9 billion. Wärtsilä is listed on Nasdaq Helsinki.
www.wartsila.com