Trust centre — Netigate

Cited by

Facts read from this source

• GDPR Report an error

  “Netigate complies with the EU General Data Protection Regulation (GDPR) and applicable European privacy laws.”

• Data residency Report an error

  “Personal data is processed within the European Union, and our data centers are located in secure, EU-based environments.”

• DPA Report an error

  “Customers can review and sign our standard Data Processing Agreement (DPA), which details the roles and responsibilities of both parties. The agreement also lists all approved sub-processors used to provide our services.”

• Dora Report an error

  “Netigate is not regulated under DORA or considered a critical third-party provider but recognizes that our regulated customer’s responsibility to ensure suppliers uphold data management and security standards.”

• ISO 27001 Report an error

  “Netigate is certified according to ISO/IEC 27001:2022, which covers our entire information security management system. This certification is audited annually by an accredited external auditor.”

• Nis2 Report an error

  “Netigate is not directly regulated under the NIS2 Directive or classified as an essential entity but recognizes that its regulated customers must ensure their suppliers maintain strong data protection, cybersecurity, and resilience standards.”

• Cloud provider Report an error

  “Netigate’s platform is built on secure, scalable, and redundant European cloud infrastructure. Our main cloud provider is Azure (EU).”

• Security architecture Report an error

  “the architecture follows cloud-native principles with microservices, API gateways, and modern security frameworks such as Zero Trust and RBAC.”

• Penetration testing Report an error

  “Security is built into our software development lifecycle, including code review, automated testing, vulnerability scanning, and external penetration testing.”

• Wcag Report an error

  “Netigate complies with WCAG 2.1 and has plans for implementing compliance for WCAG 2.2 during 2026.”

• AI training data Report an error

  “We do not use customer data to train AI models and all AI functionality is hosted within the EU on Microsoft Azure.”

• AI act Report an error

  “Netigate has conducted a preliminary classification assessment and determined that our AI-enabled features do not constitute high-risk AI systems under the EU AI Act. We are classified as an AI system provider and are implementing compliance measures in advance of the August 2, 2026 deadline.”

• ISMS scope Report an error

  “Our ISMS covers all online services and supporting processes across all Netigate entities, ensuring a risk-driven, continuously improving approach to information security.”

• Security roles Report an error

  “The CEO is accountable for information security, and the CISO is responsible for maintaining and improving the ISMS.”

• Encryption Report an error

  “Data in transit is encrypted using TLS 1.2+ and data at rest is encrypted using AES-256. Cryptographic keys are stored and rotated securely using Azure Key Vaults.”

• MFA Report an error

  “Multi-factor authentication (MFA) is required for privileged and administrative accounts. Role-based access control (RBAC) ensures that employees only access data relevant to their duties.”

• Access review frequency Report an error

  “Access rights are reviewed semi-annually and revoked immediately when no longer required.”

• Vulnerability remediation Report an error

  “Critical Significant impact on business operations; immediate risk. Within 24 hours”

• Infrastructure as code Report an error

  “uses Infrastructure-as-Code templates (Terraform, Helm) to deploy consistent and reviewed configurations.”

• Log retention Report an error

  “Log Type Retention Period Security Logs 30 days Customer API Logs Infinite Application Logs 15 days Ingress/Web Proxy Logs 15 days”

• Backup frequency Report an error

  “Netigate performs daily and weekly backups of systems, databases, and configurations, stored redundantly in secure EU data centers.”

• Backup retention Report an error

  “Asset Frequency Redundancy Retention Production VMs Nightly Regional 30 days Production DB Weekly full + daily logs Zone redundant 14 days + cold storage monthly”

• Entity Report an error

  “Copyright © 2026 Netigate AB, Drottninggatan 25, 111 51, Stockholm, Sverige”

• Breach notification Report an error

  “In case of a data breach, Netigate will immediately notify and support the data controller in accordance with our GDPR obligations and as further set forth in the DPA we have with every Customer and supplier who processes data.”

• EU storage Report an error

  “Netigate has contractually agreed with such sub-processors to store data within the EU.”

• Transfer safeguards Report an error

  “All Netigate’s current sub-processors conduct their data processing either: in the EU/EEA in a country with an adequacy decision to a sub-processor who is certified under the EU-US Data Privacy Framework, or otherwise using GDPR-approved contractual safeguards such as SCCs.”

• Ip logging Report an error

  “The storage period of IP adresses is currently 7 days.”

• Respondent cookies Report an error

  “The survey page does not use cookies for the respondents other than in one particular survey distribution setting of one response per person.”

• Document access Report an error

  “If you are not yet a Netigate Customer but may be interested in becoming one, we are happy to provide these documents after your company has signed our standard NDA.”

• Third party sharing Report an error

  “No personal information will be shared to a third party unless specifically stated in the survey or with your specific consent.”

Scores citing this record

• The Academic Researcher Form & survey building
• The Academic Researcher Consent, GDPR & respondent data
• The Academic Researcher Hosting choice, teams & portability
• The Academic Researcher European sovereignty
• The Data Protection Officer Form & survey building
• The Data Protection Officer Consent, GDPR & respondent data
• The Data Protection Officer Hosting choice, teams & portability
• The Data Protection Officer European sovereignty
• The HR Lead Form & survey building
• The HR Lead Consent, GDPR & respondent data
• The HR Lead Hosting choice, teams & portability
• The HR Lead European sovereignty
• The Market Researcher Form & survey building
• The Market Researcher Consent, GDPR & respondent data
• The Market Researcher European sovereignty
• The Operations Manager Form & survey building
• The Operations Manager Consent, GDPR & respondent data
• The Operations Manager Hosting choice, teams & portability
• The Operations Manager European sovereignty
• The Skeptic Form & survey building
• The Skeptic Consent, GDPR & respondent data
• The Skeptic European sovereignty