Trust & Compliance
Everything your risk and compliance team needs to know about us. On one page.
Certifications, regulatory readiness, AI governance, and data handling – precisely worded and backed with evidence, so your review goes faster.
Certifications
Certified – and specific about it.
ISO 27001Information security management · scope: Belgrade and Iasi · certified since: 2025, last audit: 2026
ISO 9001Quality management · scope: Belgrade and Iasi · certified since: 2025 · last audit: 2026
EcoVadisWe have been awarded the Committed badge for continuous sustainability improvement.
Regulatory readiness
What applies in your industry – and how we deliver.
| Framework | Our status | What that means in practice |
|---|---|---|
| GDPR / revFADP | compliant | Standard DPA contracts, documented TOMs, EU/CH data hosting selectable |
| DORA | delivery-ready | ICT third-party requirements reflected in our contracts; audit rights, exit strategy, incident reporting chains defined |
| EU AI Act | prepared | AI use in the SDLC documented and classified; human oversight provable (framework gates) |
| FINMA context | project-proven | Experience with outsourcing-circular requirements in banking/insurance projects |
| NIS2 / critical infrastructure | project-proven | Secure-SDLC evidence for operators of critical infrastructure (energy, transport, telecom) |
AI governance
How we use AI – binding, not a statement of intent.
- Human review before every merge – no exceptions, contractually assurable
- No customer data used in model training
- RAG-only access, no direct production or filesystem access
- Traceability of every AI-assisted change down to line and commit
- Tool vetting: only vetted AI tools in client projects (documented process)
Data handling & delivery governance
European engineering hubs. Swiss accountability.
Contracting party
A Swiss corporation (Pfäffikon SZ) as your single contracting party – one point of contact, one legal framework.
Data residency
Data and code hosting in CH/EU selectable; access concepts documented per project.
Teams & locations
Engineering hubs in Serbia, Romania, Moldova – under uniform Swiss quality and security governance.
Compliance one-pager for your procurement
All facts on this page as a PDF – for vendor reviews and risk assessments.
Questions from risk or compliance?
A joint call with your colleagues – we bring the evidence.