Certifications

Certifications and Compliance

Trust is built upon Transparency

While our intellectual property is our highest good, we are convinced that transparency and certified processes not only improve data security and confidentiality but build trust within our ecosystem.

Our Certifications

ISO 27001

Many companies use the ISO 27001 certification, but a closer look reveals significant gaps about their certification. Phoenix took the extra mile and made sure that multiple parts of our offering are ISO certified, such as the kvant Cloud Platform itself, our Software-Defined Data Center and our Managed Services.

ISAE 3402 Type I and Type II

Our Docker Container Platform is ISAE 3402 Type 2 certified according to Independent Service Auditor’s Report of the Description of Controls, Design and Operating Effectiveness. The Controls and Testing was performed on Backup and recovery, Data and Network Security, Malware Protection and more parameters.

We focus on Compliance

FINMA 2018/3

Companies or individuals wishing to engage in financial-market activity need authorization from FINMA, which checks that they meet the relevant regulatory requirements. Phoenix Systems is outsourcing-compliant and therefore an ideal partner for banks, insurance companies and financial institutions.

Swiss Data Privacy Law

We take security seriously. Phoenix Systems is the ideal partner for those looking to respect the strict Swiss data privacy laws. We are skilled experts, reflecting Switzerland's tradition and forward-thinking approach, while being compliant to the New Federal Act on Data Protection (nFADP).

Awards and Memberships

swiss made software

swiss made software denotes high-quality Swiss ICT products and values such as quality, innovation, and precision in software development. To be granted the swiss made software batch, companies must prove that the manufacturing process takes place in Switzerland and the company is based and registered in Switzerland.

swiss hosting

The swiss hosting is based on two promises. The data hosted remains in Switzerland and the data can only be accessed by third parties via the Swiss authorities. The first promise can be upheld by large international providers with a base in Switzerland – but not the second.