Data Security & Certification
Data Security and Certification – Innovationsoft B.V.
Last updated: August 2025
At Innovationsoft, we understand that our customers’ data must be secure. We have proven to many clients that our platform is both reliable and safe. Protecting data has always been our top priority.
We do everything possible to continuously secure our software and update it with the latest security technologies. This ensures that our solutions meet the highest standards not only today, but also in the future.
Large organizations use our software for the issuance and management of workwear. They conduct independent annual tests on our software. We fully welcome this, because we believe: trust is good, control is better.
ISO 27001 Certification (in preparation)
Innovationsoft is currently undergoing the official certification process for ISO/IEC 27001:2023. The audits are scheduled for October and December 2025. With this step, we underline our commitment to meeting the highest international standards for information security management.
Our data centers are already ISO 27001 certified and therefore meet the highest requirements for both physical and digital security.
GDPR / AVG
Innovationsoft strictly complies with the provisions of the General Data Protection Regulation (GDPR / AVG). Personal data is processed and protected solely in accordance with legal requirements. Transparency, purpose limitation, and data minimization are central to our approach.
Technical and Organizational Security Measures
To optimally protect your data, we apply a comprehensive security framework, including:
- Data centers with redundant power supply, cooling, and network connections
- Regular backups at multiple locations, daily checks, and monthly recovery tests
- Encryption of all passwords (Bcrypt, sha512) and a dedicated secure database for each customer
- Two-Factor Authentication (2FA) and OAuth 2.0 for access management
- Firewall, antivirus, and anti-spam protection on all servers
- TLS-secured connections with the strongest possible encryption
- Strict access controls: only authorized personnel have access to sensitive systems
- Organizational assurance through legal separation of infrastructure and software
Continuous Development
Our employees regularly participate in training and education to continuously strengthen their knowledge and skills in information security. Through monthly maintenance and a strict update policy, our systems are always kept up to date with the latest security standards.
Support
For questions or security-related concerns, we are available from Monday to Friday. In urgent cases, we of course provide prompt support – even outside regular working hours.