JLG Consulting
Contact us

Trust · for procurement and IT security

Supplier qualification.

Company details, certification, security practice and references. Documents marked “on request” are sent by email, under NDA where they are confidential.

Last reviewed 26 October 2026

Request documentsCompany facts (JSON)
Entity
J.L.G. Consulting S.R.L.
VAT RO15732578
Founded
10 September 2003, Bucharest
Certification
ISO/IEC 27001:2022, scope “Software development”, valid to 5 March 2029

01Certification

Published here
Standard
ISO/IEC 27001:2022 (SR EN ISO/CEI 27001:2023)
Scope
Software development
Certificate
27.NAT931.EN.1
Issued by
NATCERT, accredited by IMAB (reg. RO.ISMS.0822)
First issued
7 March 2023
Current issue
6 March 2026
Expires
5 March 2029
Next surveillance
By 5 March 2027
On request
  • The certificate PDF

02Company and legal identity

Published here
Legal name
J.L.G. Consulting S.R.L.
Trade Register
J2003012295402
EUID
ROONRC.J2003012295402
CUI · VAT
15732578 · RO15732578
Registered office
Bd. Iuliu Maniu 7, 2nd floor, Sector 6, 061072 Bucharest, Romania
Founded
10 September 2003
Activity
NACE 6210
On request
  • A current trade register extract (certificat constatator)
  • Annual accounts

03How we build software

Published here

Development runs under our ISO/IEC 27001 management system, with written policies for supply chain, patching, incident reporting, staff screening and segregation of duties.

Our engineers work with AI coding agents every day. Every change, whether a person or an agent wrote it, goes through the same review, tests and release process.

On request
  • Statement of Applicability
  • Internal audit summary

04People

Published here
  • Pre-employment checks
  • Segregation of duties
  • Security training
On request
  • Good-conduct certificates for named staff
  • Europass CVs

05Suppliers

Published here

Subcontractors work under our supply-chain policy, and the security terms of a contract flow down to them.

On request
  • The supply-chain policy

06Incidents

Published here

We follow a written incident-reporting procedure. We notify a client of an incident that affects them within the time agreed in the contract.

On request
  • The procedure

07Vulnerabilities

To report a vulnerability in jlg.ro or in software we deliver, write to contact@jlg.ro, the contact in our security.txt file. Please give us time to fix it before you disclose it.

08Data protection

We handle personal data in our projects under the GDPR and the terms of each contract. How this website handles personal data is in our privacy notice.

09What we sign (Part-IS and NIS2)

Published here
  • Right to audit, including by the competent authority
  • A named security contact
  • Flow-down to subcontractors
  • Incident notification within the time agreed in the contract
On request
  • A contract annex template

10References

INDRA

Period
2006 to today
Scope
Controller working position software, including iTEC, and support for INDRA systems at seven European air navigation service providers
Role
Development partner

EUROCONTROL

Period
2008 to today
Scope
ASMT, TOKAI and RAT, and APF
Role
Prime contractor

EMSA

Period
2017–2026
Scope
EMCIP, built and developed
Role
Contractor under two framework contracts, from 2017 and 2022

TOKAI users at MUAC, NAVIAIR, ENAIRE, IAA, Austro Control and DFS describe working with us on the TOKAI page. Signed reference letters and named contacts are available on request.

11Accessibility

Published here

This website's accessibility statement. Accessibility requirements for the software we deliver are agreed with each client.

12Documents

DocumentAvailable
ISO/IEC 27001 certificate (PDF)On request
Trade register extract (certificat constatator)On request
Annual accountsOn request
Statement of Applicability, internal audit summary, policies and proceduresUnder NDA
Europass CVs, good-conduct certificatesUnder NDA
Contract annex templateOn request
Signed reference letters, named reference contactsOn request
Request documents

13Contact

Procurement, security and privacy

contact@jlg.ro

Who else will ask, and what they'll want

  • Your programme managerThe systems we build and support, in Work.
  • Your engineering leadHow we review, test and release software, in How we work.
  • Your data protection officerHow we handle personal data, in Data protection and our privacy notice.
Send this to a colleague
JLG Consulting

Company profile

jlg.ro/trust

Company profile

JLG Consulting (J.L.G. Consulting S.R.L.) is a Bucharest software company, founded in 2003, that builds and runs software for air traffic management and safety. It makes SkyRoster, develops EUROCONTROL's TOKAI and ASMT safety tools, and built EMSA's EMCIP platform. Documents marked “on request” are sent by email, under NDA where they are confidential.

Company and legal identity

Legal name
J.L.G. Consulting S.R.L.
Trade Register
J2003012295402 · EUID ROONRC.J2003012295402
CUI · VAT
15732578 · RO15732578
Registered office
Bd. Iuliu Maniu 7, 2nd floor, Sector 6, 061072 Bucharest, Romania
Founded
10 September 2003 · NACE 6210

On request: a current trade register extract (certificat constatator), annual accounts

Certification

Standard
ISO/IEC 27001:2022 (SR EN ISO/CEI 27001:2023)
Scope
Software development
Certificate
27.NAT931.EN.1
Issued by
NATCERT, accredited by IMAB (reg. RO.ISMS.0822)
Dates
First issued 7 March 2023 · re-issued 6 March 2026 · expires 5 March 2029
Next surveillance
By 5 March 2027

On request: the certificate PDF

How we build software

Development runs under our ISO/IEC 27001 management system, with written policies for supply chain, patching, incident reporting, staff screening and segregation of duties. Every change, whether a person or an AI coding agent wrote it, goes through the same review, tests and release process.

On request: Statement of Applicability, internal audit summary

People

  • Pre-employment checks
  • Segregation of duties
  • Security training

On request: good-conduct certificates, Europass CVs

Suppliers

Subcontractors work under our supply-chain policy, and the security terms of a contract flow down to them.

On request: the policy

J.L.G. Consulting S.R.L. · VAT RO157325781 / 2
JLG Consulting

Company profile, continued

Incidents

A written incident-reporting procedure; clients notified within the time agreed in the contract.

On request: the procedure

Vulnerabilities

Report to contact@jlg.ro.

Data protection

We handle personal data in our projects under the GDPR and the terms of each contract.

What we sign (Part-IS and NIS2)

  • Right to audit, including by the competent authority
  • A named security contact
  • Flow-down to subcontractors
  • Incident notification within the time agreed in the contract

On request: a contract annex template

References

INDRA2006 to today · development partner for controller working position software, including iTEC, and support for INDRA systems at seven European air navigation service providers
EUROCONTROL2008 to today · ASMT, TOKAI and RAT, and APF · prime contractor
EMSA2017–2026 · EMCIP, built and developed under two framework contracts

TOKAI users at MUAC, NAVIAIR, ENAIRE, IAA, Austro Control and DFS: jlg.ro/work/tokai. On request: signed reference letters, named contacts

Accessibility

Website statement at jlg.ro/legal/accessibility. Requirements for delivered software are agreed with each client.

Contact

Procurement, security, privacy
contact@jlg.ro
Printed from jlg.ro/trust · last reviewed 26 October 20262 / 2