Trust & Compliance
Everything Your Risk and Compliance Team Needs to Know About Us. On One Page.
Certifications, regulatory readiness, AI governance, and data handling – precisely worded and backed with evidence, so your review goes faster.
Certifications
Certified – And Specific About It.
ISO 27001Information security management · scope: Belgrade and Iasi · certified since: 2025, last audit: 2026
ISO 9001Quality management · scope: Belgrade and Iasi · certified since: 2025 · last audit: 2026
EcoVadisWe have been awarded the Committed badge for continuous sustainability improvement.
Regulatory Readiness
What applies in your industry – and how we deliver.
| Framework | Our Status | What That Means in Practice |
|---|---|---|
| GDPR / revFADP | compliant | Standard DPA contracts, documented TOMs, EU/CH data hosting selectable |
| DORA | delivery-ready | ICT third-party requirements reflected in our contracts; audit rights, exit strategy, incident reporting chains defined |
| EU AI Act | prepared | AI use in the SDLC documented and classified; human oversight provable (framework gates) |
| FINMA context | project-proven | Experience with outsourcing-circular requirements in banking/insurance projects |
| NIS2 / critical infrastructure | project-proven | Secure-SDLC evidence for operators of critical infrastructure (energy, transport, telecom) |
AI Governance
How we use AI – binding, not a statement of intent.
- Human review before every merge – no exceptions, contractually assurable
- No customer data used in model training
- RAG-only access, no direct production or filesystem access
- Traceability of every AI-assisted change down to line and commit
- Tool vetting: only vetted AI tools in client projects (documented process)
Data Handling & Delivery Governance
European engineering hubs. Swiss accountability.
Contracting Party
A Swiss corporation (Pfäffikon SZ) as your single contracting party – one point of contact, one legal framework.
Data Residency
Data and code hosting in CH/EU selectable; access concepts documented per project.
Teams & Locations
Engineering hubs in Serbia, Romania, Moldova – under uniform Swiss quality and security governance.
Compliance One-Pager for Your Procurement
All facts on this page as a PDF – for vendor reviews and risk assessments.
Questions From Risk or Compliance?
A joint call with your colleagues – we bring the evidence.