Sovereign Cloud Platform manual›Security and compliance
Security and data protection are built into how we host, develop and support the platform. This page brings together what procurement, security and data protection teams usually ask for.
Certification
Open Social B.V. is ISO 27001 certified. The scope covers the whole organisation, including hosting, development and support. Clients can request the certificate and scope statement.
Data protection (GDPR)
- We act as data processor and sign a data processing agreement with every client.
- The platform has built-in features for consent and account deletion. See GDPR and data privacy.
- Our subprocessors are listed publicly.
Access and identity
- Connect your own identity provider with single sign-on.
- Roles and permissions decide who can see and do what. See User roles.
Documents you can request
Through your customer success manager you can request the data processing agreement, our terms and SLA, the ISO 27001 certificate and security policy, and a summary of the latest penetration test. More on our Legal and security page.
Found a vulnerability? Please report it through our responsible disclosure process, linked from the footer of this site.
← Previous: Hosting and data locationBack to the Sovereign Cloud Platform manual