We are proud to announce that VSoft has been awarded three information security certificates. They confirm that we protect our Clients’ data both in on-premises environments and in the cloud.
When building applications in archITekt, companies move increasingly important processes onto the platform: document workflows, requests, reports, integrations with ERP and MES systems, and often customer and employee data as well. The security of this data cannot rely on vendor declarations alone. That is why we submitted our processes to external verification, which resulted in three certificates confirming that we protect information in line with international standards.
What the certificates cover
ISO/IEC 27001 confirms that VSoft operates a comprehensive information security management system. It includes risk analysis, access control and incident response procedures, among other areas.
ISO/IEC 27017 applies to cloud services. It defines what the software provider is responsible for and what falls to the infrastructure provider, and sets out rules for the secure configuration of cloud environments.
ISO/IEC 27018 focuses on protecting personal data in the public cloud. It guarantees that we process data only for purposes agreed with the Client.
We chose these three standards deliberately. archITekt can be deployed both on-premises and in the cloud, and in a cloud environment ISO 27001 alone is not enough. Complete security also requires rules dedicated to the cloud and to personal data.
What this means for archITekt users
For companies that create and develop applications on archITekt, VSoft’s certification brings tangible benefits:
- Faster vendor selection and assessment. The certificates answer most questions in security questionnaires, which shortens due diligence and procurement procedures.
- Easier regulatory compliance. Organizations subject to supply chain security requirements, such as NIS2, DORA or GDPR, can use the certificates as evidence that their technology provider follows recognized standards.
- A secure cloud. Applications running in the cloud operate under clearly defined configuration rules and a clear division of responsibilities.
- Personal data protection. Data entered into forms, processes and registers built in archITekt is protected in accordance with ISO 27018.
As a result, companies can quickly build and automate more processes in low code, confident that the foundation their applications run on meets the requirements of the most demanding industries.
