Ivalua, a global leader in spend management, has successfully completed an IRAP (Information Security Registered Assessors Program) Assessment in Australia. This achievement confirms that Ivalua’s platform and hosting environment can handle data classified up to OFFICIAL: Sensitive. The assessment was conducted by a qualified assessor as part of the Australian Government’s initiative to ensure robust security practices for organizations managing sensitive information.
Under the framework established by the Australian Signals Directorate (ASD), IRAP evaluates security practices through independent assessments. This framework provides a rigorous standard for cloud providers, instilling confidence among Commonwealth agencies regarding their choice of cloud and Software as a Service (SaaS) providers.
December 10, 2025, marks a significant milestone for Ivalua. The successful IRAP Assessment offers key advantages, including independent verification of Ivalua’s technical and organizational controls. These controls align with the Australian Information Security Manual Assessment, essential for handling sensitive government information. Additionally, it simplifies procurement processes and reduces audit burdens by providing validated evidence of critical security controls for all data stored within Ivalua.
The implications of this assessment are particularly important for Ivalua’s public sector clients. Following the IRAP evaluation, these clients can now request an Authority to Operate (ATO) from an authorizing officer within the Australian Government. This streamlining is expected to enhance operational efficiency for organizations in the public sector.
Amit Maloo, Chief Information Security Officer at Ivalua, emphasized the significance of this achievement, stating, “Achieving the IRAP OFFICIAL: Sensitive level reflects Ivalua’s long-standing focus on transparency and maintaining robust security across our platform.” He highlighted that this milestone, in conjunction with Ivalua’s globally recognized security certifications, positions the company as a preferred solution for organizations aiming to modernize their procurement operations while adhering to the highest data protection standards.
Ivalua’s unified platform and single-source data model have made it a trusted partner for security-conscious enterprises worldwide. The company boasts several certifications, including ISO 27001 for information security and TISAX Level 2 for the automotive industry, along with SOC 1 and SOC 2 attestation reports. Furthermore, its environment is compliant with FedRAMP standards for the US public sector.
These credentials solidify Ivalua’s reputation as a partner of choice for leading organizations in sectors such as defense, government, and financial services. Clients include well-known names like BAE Systems, CACI, Teledyne Technologies, SAAB, MBDA, Thales, and Rheinmetall.
As Ivalua continues to expand its influence in spend management, the successful completion of the IRAP Assessment further enhances its standing in the global market. The company remains committed to providing innovative solutions while ensuring compliance with stringent security standards, thereby bolstering trust among its diverse clientele.
For more information about Ivalua and its offerings, visit their official website at www.ivalua.com.

































