Question 1

Is SecureCloud ISO 27001 certified, and how often is the certificate audited?

Accepted Answer

Yes. SecureCloud is certified to ISO/IEC 27001:2022, and the certificate is audited annually by TÜV Rheinland. The standard evidences a systematic information security management system (ISMS) with documented processes for risk management, access control and business continuity. All data is processed exclusively in German data centers operated by noris network AG in Nuremberg.

Question 2

What does BSI C5 attested mean for SecureCloud, and is it the same as a certification?

Accepted Answer

BSI C5 attested means an independent auditor has examined SecureCloud's cloud security against the Cloud Computing Compliance Criteria Catalogue (C5) of Germany's Federal Office for Information Security (BSI). C5 is an attestation, not a certification: it documents an auditor's examination report and counts as the highest evidence of cloud security in Germany. For regulated sectors such as the public sector and financial services, C5 is increasingly a requirement in tenders.

Question 3

Is SecureCloud certified under the BMWK's Trusted Cloud initiative?

Accepted Answer

Yes. SecureCloud is Trusted Cloud certified, recognised under the Trusted Cloud initiative of the German Federal Ministry for Economic Affairs and Climate Action (BMWK). The label marks cloud services that meet German-standard transparency, security and legal criteria. SecureCloud's company headquarters and servers are located exclusively in Germany.

Question 4

Is SecureCloud GDPR certified or GDPR compliant, and what is the difference?

Accepted Answer

SecureCloud is GDPR compliant. There is no general GDPR certification: the General Data Protection Regulation (GDPR) provides no nationally accredited certification scheme, so no serious provider claims to be GDPR certified. SecureCloud processes all data exclusively in German data centers, is subject to German law alone, and has no US parent company subject to the US CLOUD Act.

Question 5

Does SecureCloud meet the Center for Internet Security (CIS) benchmarks?

Accepted Answer

Yes. SecureCloud is CIS compliant, meaning it is configured to the benchmarks of the Center for Internet Security (CIS). These benchmarks define proven hardening guidelines for systems and services. Combined with ISO/IEC 27001 certification and the BSI C5 attestation, CIS compliance shows that SecureCloud proves security at the configuration level as well as the process level.

Question 6

Does SecureCloud carry the IT-Security made in Germany seal, and where are its servers located?

Accepted Answer

Yes. SecureCloud carries the IT-Security made in Germany seal (issued by TeleTrusT - IT Security Association Germany). Its headquarters (Neumarkt i.d. OPf.) and servers (noris network AG, Nuremberg) are located exclusively in Germany; there is no US parent company and no access under the US CLOUD Act. The seal stands for products free of hidden backdoors, our promise: #nobackdoor.

Question 7

How do SecureCloud's certifications help meet DORA, NIS-2 and the GDPR?

Accepted Answer

SecureCloud's certifications (ISO 27001, the BSI C5 attestation, Trusted Cloud, CIS) evidence the technical and organisational measures that regulated companies can rely on directly for DORA, NIS-2, KRITIS and the GDPR. Certifications are credentials SecureCloud itself holds; compliance obligations such as DORA or NIS-2 are your organisation's duties, which SecureCloud supports. The compliance page at securecloud.de/en/compliance shows how the mapping works in detail.

Question 8

Is SecureCloud sufficiently certified for public-sector tenders and regulated industries?

Accepted Answer

Yes. For tenders in the public sector, healthcare and finance, SecureCloud provides the customary credentials: ISO/IEC 27001 certification (audited annually by TÜV Rheinland), the BSI C5 attestation as Germany's highest cloud-security evidence, Trusted Cloud certification from the BMWK, and CIS compliance. All data remains in Germany and is subject to German law alone, with no access under the US CLOUD Act.

Certifications & Attestations

Over 6,000 customers trust SecureCloud

Independently audited:
‍Our certifications and attestations in detail

ISO 27001

BSI C5

Trusted Cloud

DSGVO / GDPR

CIS

IT-Security made in Germany

Frequently asked questions

Verwandte Begriffe

Learn more!

Data based in Germany

Elevating business.