Infosys BPM review

Each line is a datapoint with its grade. Grades are the ones the anchors act on: a sub-criterion scored 5 requires at least one E1 or E2 source, and evidence that is entirely E3 caps the sub-criterion at 3.

12 claims on this sheet, by grade: E1 6 E2 6 E3 4 Counts sum above 12 because 4 claims cite more than one grade.

• 57,242 employees at 31 Mar 2026 per the subsidiary’s own statutory annual report — down from 57,571 a year earlier, and 3,288 below the 60,530 claimed on its own website at the same date. Wikipedia carries a third and higher series again. The filing figure is used for scoring and the conflict is unreconciled in public sources Infosys BPM Limited Annual Report 2025-26 E1E3
• 42 delivery centres across 14 countries and five continents at 31 Mar 2026 — 11 India, 6 APAC, 16 Europe, 9 Americas. The 40-centre, 13-country figure that appears elsewhere is the superseded FY2024-25 report, not a live conflict Infosys BPM Limited Annual Report 2025-26 E1E2
• States recertification in five ISO standards (27001, 27701, 22301, 9001, 45001) and an enterprise SOC 1 (SSAE18) audit performed by KPMG covering 44 delivery locations, non-qualified for the fifteenth consecutive year. All of it is entity-scoped to the subsidiary — but no certificate numbers, certification bodies or validity dates are published anywhere, and SOC 1 is a financial-controls attestation, not SOC 2 Type II Infosys BPM Limited Annual Report 2025-26 E1
• SCOPING EXCLUSION: every certificate on the Infosys certification register — ISO 27001:2022, ISO 22301, ISO 27701, ISO 42001, SSAE 18/ISAE 3402 SOC Type I and II, CMMI Level 5 — is scoped to "Infosys Limited". Infosys BPM Limited is named in none of them, so the parent’s SOC 2 Type II and certificate identifiers are not credited to the evaluated entity infosys.com certifications register E1
• Infosys McCamish Systems LLC — a direct subsidiary of Infosys BPM Limited per the BPM annual report’s own subsidiary list — suffered a ransomware breach disclosed in November 2023 affecting approximately 6.5 million individuals, settled for $17.5 million in March 2025, with Bank of America and Fidelity Investments notifying customers. The incident does not appear in the Infosys BPM materials reviewed SecurityWeek, Mar 2025 E1E2
• Glassdoor 3.2/5 across 7,780 reviews current to August 2026; 51% recommend, senior management 2.9, compensation and benefits 2.6, with no employer-response activity visible on the review stream Glassdoor, checked Aug 2026 E2
• A WARN Act investigation was opened in January 2026 into a mass layoff of 248 employees at the Chesterbrook, Pennsylvania facility, alleging failure to give the required 60 days’ notice Strauss Borrelli, 29 Jan 2026 E2
• 26 named languages verified in use at the Łódź hub with 2,500+ Polish staff — Arabic, Bulgarian, Czech, Danish, Dutch, English, Estonian, Finnish, French, German, Greek, Hebrew, Hungarian, Italian, Latvian, Lithuanian, Norwegian, Portuguese, Romanian, Russian, Slovak, Spanish, Swedish, Turkish and Ukrainian — corroborated by live postings. The company markets "33+ languages" Careers in Poland employer profile E2E3
• Analyst coverage naming the SUBSIDIARY: NelsonHall NEAT Leader for HR Transformation Services 2026. The CXM-specific coverage names the PARENT — ISG Provider Lens 2023 Customer Experience Services and the Gartner Market Guide for Customer Management BPO 2020 are both listed as "Infosys" — and Infosys BPM does not appear in the Everest CXM PEAK Matrix leader set infosysbpm.com analyst newsroom E1
• Client-review footprint is effectively absent: the G2 profile carries two reviews at 4.0/5, both dated 21 September 2021 and outcome-free; the Clutch profile is "not yet reviewed". Clutch lists provider-supplied fields of $1,000+ minimum project size and $25–49/hr Clutch, checked Aug 2026 E2
• Of 36 published customer-service case studies only three name the client — Sally Beauty, Texas Instruments and Cisco — and none carries a date. The Sally Beauty case quantifies 80% automation, 98% throughput and 83% AHT reduction; 33 named client testimonials carry named executives infosysbpm.com case studies E3
• Commercial model published in structure only — FTE-based, transaction-based and outcome-linked pricing with outcome fees tied to CSAT, first contact resolution, retention or cost-to-serve targets — with no inclusions or exclusions, no notice or exit terms and no pilot or minimum stated. Infosys BPM publishes no privacy statement of its own; its URL redirects to the Infosys Limited statement, which does name a DPO and publish a DPA covering "Infosys Limited, its subsidiaries" infosys.com privacy statement E3

Computed from this provider’s anchor scores against the 29-provider field it is scored in, from the 12 public claims above: the sub-criteria where it sits furthest above the field median, and furthest below. Selection is by distance from the field, not by raw score — a 5 where most of the field scores 5 says nothing. These are scores for what a provider publishes, so a low score can mean a weak record or a quiet one, and this block cannot tell them apart.

Sub-criterion anchor scores in criterion order, with the weighted criterion total computed from them. Multiply each anchor by its sub-criterion weight over five and sum: that is the whole arithmetic, and it is why this total can be checked without taking anyone's word.

• Largest remaining evidence gap: no BPM-scoped certificate identifiers and no published agent access-control model

Every line above is meant to be checkable. If a datapoint is wrong, out of date, or missing a certificate identifier we could not find, the corrections process is open: submit the evidence and the score is re-derived through the anchors. Facts are correctable; scores follow facts.