Computer security: our qualifications and certifications

Computer security:
our qualifications and certifications

At Oodrive, we have a conviction: although security is a common concern as well as a fundamental right, it cannot be everyone’s business.

Indeed, the diversity of profiles and talents, which contribute to the richness of organizations, cannot be an obstacle to the benefits of using secure ecosystems in companies.

It’s not only a matter of making technology accessible to all through the tools made available, but also of guaranteeing its secure use. And it is with the aim of ensuring secure management of your sensitive content, in compliance with European regulations, that we strive to obtain the qualifications and certifications attesting to the highest level of corporate content security.

The SecNumCloud qualification

It is a qualification given by the ANSSI, the French National Agency for Information Systems Security. This qualification attests to the highest level of computer security.

The reference framework for cloud computing service providers, more commonly known as cloud providers, is a set of rules that must be followed by these same providers wishing to obtain a qualification for their offers in this field. It covers requirements related to the provider, its staff, and the conduct of its services.

This qualification can be issued to cloud providers of the SaaS (Software as a Service), PaaS (Platform as a Service) and IaaS (Infrastructure as a Service) types.

In January 2019, Oodrive became the first SecNumCloud qualified player. We managed to obtain this ANSSI Security Visa for all our private cloud offerings. This recognition is the culmination of our quality and security approach undertaken for many years now. This three-year visa was renewed in 2022.

The eIDAS qualification

The eIDAS regulation sets out requirements for mutual awareness of electronic identification and electronic signature for exchanges between public sector bodies and their users. Essentially devoted to electronic identification and trust services, the eIDAS regulation also deals with electronic documents by giving them legal effect.

As part of our ongoing efforts to provide you with this trusted digital ecosystem, we are in compliance with the European eIDAS regulation. This allows us to be recognized as a trustworthy provider of qualified solutions, with a real legal value.

The ISO 27001
certification

It is the international standard for information security management systems. This standard is a pioneer in the field of IT security. ISO 27001 certification is essential for reducing threats to your most sensitive assets and is an ideal response for cloud providers to customer requirements and legal constraints such as the RGPD. Similarly, this certification is a qualified response against potential security threats such as:

  • Cybercrime
  • Data breaches
  • Disasters
  • Theft…

Our ISO 27001:2013 certification attests to our good practices in terms of protection and security for your data management. The certified perimeter concerns our infrastructures, our employees, and our software.

The ISO 27701
certification

ISO 27701 is a certification recognizing a management system for the protection of privacy in the context of risks management related to the protection of personal data. It is an extension of the 27001 certification. This means that, to access ISO 27701 certification, it is necessary to meet the requirements relating to the information security management system.

Our ISO 27701:2019 certification attests to the implementation of a controlled data policy and a high level of confidentiality and privacy protection

The HDS certification

The Health Data Hosting certification is mandatory to justify the hosting and outsourcing of services and applications containing identifiable and personal health data. This certification aims to guarantee the quality of service provided by health data hosts.

The covid-19 health crisis has highlighted the increased need to secure health data. Oodrive is positioned as a certified and trusted player in the management of health data.

They trust us

« We supply jets both for commercial use and for the defence sector, so we need a secure system to share confidential information with our subsidiaries. Oodrive is that system. »

Dassault Aviation