Trust Center > Certifications
Our security & privacy certification initiative
SkyKick takes its responsibilities with regards to data protection, information security, and compliance extremely seriously. We continuously work on improving our services by which we protect and secure your and your customers’ data.
SkyKick systems, policy, processes, and procedures are actively aligned with and audited on industry-recognized standards and best practices, such as the Cloud Security Alliance STAR program, the worldwide recognized cybersecurity standard ISO 27001, and the industry leading Data Pro Code on data protection and privacy.
More information on the SkyKick Cloud Security Alliance (CSA) Trusted Cloud Provider Seal, its ISO 27001:2013 certification, ISO 27701:2019 certification, CSA STAR level 2 certification and Data Pro verification which were attained through its rigorous security & privacy compliance program and independent third party audits can be found below.
Cloud Security Alliance – Trusted Cloud Provider
As a part of its continued commitment to providing Partners and Customers with top-notch security and privacy controls SkyKick has partnered with the Cloud Security Alliance, a global non-profit organization that promotes best practices for cloud security and provides a globally recognized framework for evaluating cloud providers cybersecurity and data protection measures.
SkyKick has obtained the Trusted Cloud Provider seal is registered in the the STAR (Security, Trust, Assurance & Risk) registry from the Cloud Security Alliance (CSA). Next to this SkyKick has obtained the prestigious STAR level 2 certification for its platform and STAR enabled Solutions.
The STAR L2 certification process is a rigorous third party audit of a cloud provider’s security & privacy compliance posture, based on the Cloud Control Matrix as published by the Cloud Security Alliance. SkyKick was also assessed on the maturity of its policy, processes and procedures and was awarded gold status, which equates to CMMI-level 4, which indicates that SkyKick quantitatively measures the robustness and quality of its compliance program.
The Cloud Control Matrix also maps to other industry standards and frameworks, giving SkyKick Partners and Customers a clear insight into the technical and organizational measures that SkyKick has already implemented in relation to ISO27001, ISO27701, CIS v8.0, NIST SP800-53 and the SOC2 (Service Organization Control 2) Trusted Service Criteria.
The Trusted Cloud Provider seal and STAR level 2 certification from the Cloud Security Alliance further demonstrates SkyKick’s full commitment to meet industry best practice and standards of excellence in security, privacy, and reliability through providing secure and trustworthy cloud services to Partners and Customers, which is further backed up by its existing ISO27001, ISO27701 and Data Pro certifications. The following security assessment documentation can be accessed online here:
- SkyKick STAR level 2 certificate
- SkyKick Trusted Cloud Provider STAR registry listing
- SkyKick Consensus Assessments Initiative Questionnaire (CAIQ) v4.0.2
The CAIQ V4 registration includes a download of the Cloud Security Alliance security questionnaire based on the Cloud Control Matrix (CCM) version 4.
ISO 27001 & ISO 27701 Certification
Like most ISO management system standards, certification is not obligatory. Some organizations choose to implement these standards in order to benefit from the best practices they contain while others decide they also want to get certified to reassure customers and clients that its recommendations have been followed.
Certification by a certification authority demonstrates commitment to proactively manage and protect information and assets and ensure compliance with the relevant legal requirements. ISO 27001 details requirements for establishing, implementing, maintaining, monitoring, and improving an organization’s information security management system, and ISO 27701 prescribes the additional requirements for privacy information management.
SkyKick has worked diligently on implementing its global information security & privacy management system in adherence to the ISO 27001 & ISO 27701 standard and partners with MSECB as its main certification authority for its certification effort. MSECB also performs the Cloud Security Alliance STAR Level 2 audit.
SkyKick has a attained ISO 27001 and ISO 27701 covering its global operations through certification of its two main sites. The ISO 27001 and ISO 27701 Audit Reports, Certificates and accompanying Statement of Applicability can be accessed here:
ISO Certificates
- SkyKick ISO 27001:2013 Certificate (Cybersecurity)
- SkyKick ISO 27701:2019 Certificate (Data Protection)
- SkyKick Statement of Applicability version 5.0
The Certificates cover the two main sites: SkyKick LLC, the main headquarters, and SkyKick B.V. the EMEA headquarters which together serve all of SkyKick’s Partners and Customers worldwide.
Data Pro Certification
The Data Pro Code is the first code of conduct approved by the Dutch Data Protection Authority and is a Code of Conduct as defined under article 40 of the GDPR. For data processors, the Data Pro Code is an instrument to demonstrate compliance with the GDPR and handling customer data in a secure and privacy-friendly manner.
The Data Pro Code was developed by NLdigital, the main industry association for companies driving digital transformation. With recognizable members such as industry leaders Microsoft, Lenovo, T-Mobile, and Vodafone driving the spear of the initiatives, SkyKick was involved from an early stage.
As of its entry into the European Market, through its Dutch subsidiary and EMEA HQ, SkyKick immediately subscribed to and applied the Data Pro Code to demonstrate that personal data it is entrusted with is managed in a professional and GDPR-compliant manner.
SkyKick actively seeks to support its partners and customers to navigate the complexity of adhering to the GDPR. The Data Pro Code offers clarity and transparency on what they are entitled to expect. SkyKick has been certified against the Data Pro+ Code, which demonstrates GDPR compliance commensurate to the partners and customers it serves. A copy of the Certificate and the registration with SCOPE Europe can be accessed here.
The eight principles in the Data Pro Code represent a concrete implementation of the GDPR legislation and ensures openness and accountability towards customers.
For further details on SkyKick’s ISO 27001, ISO 27701 and Data Pro certification, and its global certification initiative please send an email to dataprotection@skykick.com.