Certifications & IT Security

Proven standards for the most demanding requirements

Certified. Audited. Trustworthy.

Archiving and decommissioning IT systems involves sensitive data, often from regulated sectors such as the pharmaceutical, banking, insurance and automotive industries. For AvenDATA, security is not an add-on but an integral part of every solution.
Our certifications, including ISO/IEC 27001 and IDW PS 880, are reviewed annually to maintain consistently high security standards and reliably meet current requirements.
Regular recertification is essential because both regulatory requirements and the threat landscape are constantly evolving. Only through annual external reviews can we ensure that our security measures do not become outdated but keep pace with new risks and legal requirements.
AvenDATA IT security specialist reviewing archived system data

Our Security Foundation:
ISO/IEC 27001 and IDW PS 880

Our processes and systems meet the highest security standards, as evidenced by two key certifications:

ISO/IEC 27001:
Information Security Management

This internationally recognized standard defines the requirements for a comprehensive information security management system (ISMS). It ensures that we systematically identify, assess and control risks through technical and organizational measures across all processes.

IDW PS 880:
Software Audit Standard of the Institute of Public Auditors in Germany (IDW)

Certification under IDW PS 880 confirms that our software solutions comply with the Principles of Proper Accounting. For customers in finance and tax in particular, it provides clear evidence that our ViewBox archiving platform is audit-compliant.
Independent penetration testing of AvenDATA archiving systems to identify security vulnerabilities

Regular Penetration Tests

Security is not a snapshot. That is why we subject our systems to regular penetration tests by independent external specialists. Potential vulnerabilities are identified and remedied immediately, before they become risks. These tests are performed at least once a year and demonstrate our proactive security strategy.

Certified Data Centres
in Germany

We operate our hosting infrastructure exclusively in certified German data centres that are run in accordance with ISO/IEC 27001 and ISO 9001. They meet the highest requirements for data protection, resilience and physical security, which is essential for customers with particularly sensitive data.
ISO/IEC 27001-certified data centre in Germany hosting AvenDATA archiving infrastructure
Multi-level security control and monitoring system with daily, weekly, monthly and annual reviews

Multi-Level
Control System

All security related processes at AvenDATA are subject to a clearly structured control and monitoring framework with daily, weekly, monthly and annual reviews. Our systems are assessed against detailed checklists with hundreds of individual items, covering everything from access controls and network security to logging and backup procedures.
These controls are fully documented and regularly analyzed to detect deviations early and initiate corrective measures. In this way, we ensure that our security measures not only meet requirements but are also continuously improved and adapted to new risks.
Quick Answers to Your Questions About Certifications
Personal and without obligation.

Thank you

Thank you for your inquiry.
We will contact you shortly.