Certificates

The data centre used is ISO 9001 certified and has an established quality management system (QMS).

This standard defines structured processes, clear responsibilities and continuous improvement mechanisms. This ensures a consistent level of quality in operations and service provision.

Certification according to ISO/IEC 27001 confirms the implementation of an Information Security Management System (ISMS) in the data centre environment.

The standard ensures a systematic approach to identifying, assessing and addressing information security risks and protects the confidentiality, integrity, availability and authenticity of sensitive information.

In addition, certification is carried out in accordance with the variant recognised by the Federal Office for Information Security (BSI) based on IT-Grundschutz.

This specially structured and comprehensive security concept meets high national regulatory requirements and complements the international ISO system.

The data centre has a certified Business Continuity Management System (BCMS) in accordance with ISO 22301.

This ensures that critical processes can be maintained or restored within defined time frames even in the event of disruptions or failures. Emergency and recovery concepts are an integral part of the operating model.

ISO 50001 certification confirms a structured energy management system (EnMS).

Continuous monitoring and optimisation of energy efficiency ensures resource-saving, economical and sustainable operation of the technical infrastructure.

The certified management system according to ISO 45001 ensures that occupational health and safety measures are systematically implemented and continuously improved.

Risks are identified at an early stage, legal requirements are complied with and safe working conditions are guaranteed in the data centre environment.

ISO 14001 certification documents an established environmental management system (EMS).

It encompasses the structured management of environmental aspects, the reduction of emissions and waste, and the continuous improvement of the ecological performance of data centre operations.

The data centre meets the requirements of PCI DSS.

This internationally binding security standard regulates the secure handling of credit card data and defines strict measures for securing sensitive payment information.

TISAX participation confirms that the information security requirements of the automotive industry are met.

Based on the VDA Information Security Assessment (ISA) and closely aligned with ISO/IEC 27001, TISAX enables standardised assessment and mutual recognition of security audits within the supply chain.

Within the framework of the legal requirements for critical infrastructures (KRITIS) in accordance with §8a (3) BSIG, appropriate technical and organisational measures are regularly verified by independent audits.

This ensures that the availability, integrity, authenticity and confidentiality of the systems relevant to critical services is guaranteed.

The infrastructure complies with the requirements of the European standard EN 50600.

This standard defines comprehensive specifications for the planning, construction and operation of data centres - including energy supply, air conditioning, physical security, cabling, operating processes and efficiency and sustainability indicators.

ISAE 3402 (SOC 1) certification confirms effective internal control mechanisms, particularly with regard to finance-related processes.

This creates transparency and supports customers with their own compliance and audit requirements.

ISAE 3000 (SOC 2) evaluates control mechanisms based on the five Trust Services criteria: security, availability, processing integrity, confidentiality and data protection.

This documents a structured governance and control environment in data centre operations.