Trust
Infosistema is certified to ISO/IEC 27001 (information security) and ISO 9001 (quality management). Both certifications cover the design, development, operation, and support of every Infosistema product, and are audited annually by independent certification bodies.
Active certifications
Independent verification
Audited annually by independent certification bodies. Certificate copies and full scope statements are available on request. Email privacy@infosistema.com.
Information Security Management
Quality Management
Operating principles
The certifications describe an audit. These are the principles that make the audit pass every year.
Each product is designed so customer data lives in tenant-scoped storage. We do not use Customer Data to train models or for any purpose outside service delivery.
All data in transit is protected by TLS 1.2+. Data at rest is encrypted using AES-256. Encryption keys are managed per-tenant and rotated on a defined schedule.
EU customers stay in EU regions (europe-west1); US customers stay in US regions (us-central1). Region pinning is contractual, not best-effort.
No standing admin credentials in production. Privileged access is per-environment, audited, and expires. Access reviews are conducted quarterly.
Infrastructure and application logs are centralised and retained. Anomaly detection runs continuously; on-call engineers respond to alerts 24/7.
Runbooks for credential rotation, breach notification (72 hours per GDPR), and post-incident review live in the same repository as the code they protect.
Procurement teams and security reviewers can request ISO certificate copies, full scope statements, and our standard Data Processing Agreement (DPA). For privacy enquiries, see the Privacy Policy.
