Security page — XWiki

Cited by

Facts read from this source

• ISO 27001 certified Report an error

  “We are an ISO 27001 certified company 🚀”

• Certification scope Report an error

  “The certification scope covers the cloud hosting and support services provided by XWiki SAS for the XWiki and CryptPad open-source software.”

• Provider location Report an error

  “XWiki Cloud is hosted in France on OVHcloud infrastructure.”

• Infrastructure certifications Report an error

  “The hosting infrastructure benefits from recognized certifications including ISO 27001, SOC 1, and SOC 2.”

• Cloud features Report an error

  “It includes automated backups, proactive monitoring, antivirus scanning, and regular security maintenance.”

• GDPR data sovereignty Report an error

  “At the same time, it supports GDPR-aligned deployments and European data sovereignty requirements.”

• On premises option Report an error

  “Organizations with stricter internal policies or regulatory requirements can deploy XWiki on their own infrastructure. This will allow them to retain complete control over hosting, access management, integrations, and data residency.”

• Open source ownership Report an error

  “With XWiki’s open-source architecture, your organization keeps full ownership of its data. You'll also avoid vendor lock-in, while benefiting from a secure and extensible collaboration platform.”

• People security Report an error

  “HR security processes covering onboarding, role changes, and offboarding Security awareness and training programs for employees Background checks for selected positions”

• Access control Report an error

  “Multi-factor authentication (MFA) for sensitive access Strict management and monitoring of privileged accounts”

• Infrastructure security Report an error

  “Environment segregation between production, non-production, and client-level systems Continuous infrastructure monitoring and alerting”

• Network security Report an error

  “Network segmentation limiting exposure between environments Firewalls and traffic filtering to protect infrastructure boundaries Distributed Denial of Service (DDoS) protection measures”

• Endpoint security Report an error

  “Endpoint protection for corporate devices Operating system hardening based on security baselines VPN required for remote access”

• Data security Report an error

  “Encrypted backups and restoration procedures regularly tested Secure deletion processes ensuring data lifecycle control”

• Vulnerability management Report an error

  “Continuous vulnerability scanning across systems Risk-based remediation prioritization”

• Incident management Report an error

  “Centralized monitoring and security alerting Defined incident detection and response processes”

• Disaster recovery Report an error

  “Business continuity planning for operational resilience Defined and tested disaster recovery scenarios and procedures Backup redundancy across multiple providers and environments”

• List Report an error

  “OVH Virtualization infrastructure hosting 🇫🇷 France No transfer Scaleway Encrypted backup redundancy and cold storage solutions 🇫🇷 France No transfer”

• Continuous improvement Report an error

  “Regular audits Security reviews Incident response improvements Ongoing employee awareness and training initiatives”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Engineering Lead European sovereignty
• The IT Administrator Permissions, SSO & administration
• The IT Administrator European sovereignty
• The Operations Lead Permissions, SSO & administration
• The Operations Lead European sovereignty
• The Quality Manager Permissions, SSO & administration
• The Quality Manager European sovereignty
• The Skeptic European sovereignty
• The Support Knowledge Manager European sovereignty