Security ISO 27001 · Information security
Information security management system: risk management, access controls, continuity.
Compliance & certifications.
Our applications run on OVHcloud infrastructure, the most heavily certified cloud provider in Europe. Your data stays in France, under European law, in audited datacentres.
Security 
GDPR GDPR · Data protection
Data hosted and processed in Europe, under European law, in line with the General Data Protection Regulation.
Sovereignty SecNumCloud · ANSSI qualification
The highest French cloud qualification level: sovereignty, immunity from extraterritorial laws.
Health HDS · Health data hosting
The certification required to host personal health data in France.
Audit SOC 2 · Audit controls (Type II)
Independent audit of security, availability and confidentiality controls, renewed every year.
Payments PCI DSS · Payment card data
Security standard for payment card data, covering card payment flows.
Cloud CSA STAR · Cloud Security Alliance
Transparency registry for cloud security practices, built on ISO 27001.
Europe C5 · BSI (Germany)
Cloud controls catalogue from Germany's BSI, the benchmark for the European public sector.
GDPR CISPE · GDPR code of conduct
European code of conduct for cloud infrastructure providers, approved by the EDPB.
Quality ISO 9001 · Quality management
Audited quality processes: continuous service improvement and customer satisfaction.
Environment ISO 14001 · Environmental management
Control of the environmental impact of datacentres: waste, water, carbon footprint.
Environment ISO 50001 · Energy management
Energy performance of datacentres: measurement, optimisation, continuous improvement.
Certifications held by OVHcloud on the infrastructure scopes concerned. Details and attestations: ovhcloud.com
Stricter requirements?
SecNumCloud, on request
For projects bound by sovereignty requirements (public sector, critical infrastructure operators, sensitive data), Zevra deploys your application on a SecNumCloud zone qualified by ANSSI, the French national cybersecurity agency: a trusted cloud, immune to extraterritorial legislation.
Health data, on request
Does your project handle health data? Zevra deploys on an HDS-certified infrastructure, the French approval for hosting personal health data, with the architecture and the contractual commitments the regulations require.