Accreditations & Compliance:
Accredittions:
NATO
Certus is recommended by NATO and included in the prestigious NATO Information Assurance Product Catalogue (NIAPC).
Norwegian National Security Authority
NSM grants approval for the use of Certus to delete data on storage media. After an overall assessment of the documentation it is concluded that the deletion tool satisfies requirements for secure deletion of data in accordance with the Norwegian Security Act, Common Criteria, NSM’s Handbook on the destruction of documents and storage media and current standards.
Compliance:
NIST
The National Institute of Standards and Technology, an agency within the United States Department of Commerce, is dedicated to fostering American innovation and improving industrial competitiveness. Certus complies with the guidelines in NIST SP 800-88 Rev. 1.
IEEE
The Institute of Electrical and Electronics Engineers (IEEE) is a distinguished American 501 professional association catering to electronics engineering, electrical engineering, and allied fields. Certus complies with the standards outlined in IEEE 2883-2022.
GDPR
Certus ensures compliance with the General Data Protection Regulation (GDPR), a fundamental European Union regulation governing information privacy within the European Union and the European Economic Area. The GDPR stands as a pivotal pillar of EU privacy law and human rights law, notably encompassing Article 8 of the Charter of Fundamental Rights of the European Union.
HIPAA
Certus ensures compliance with the Health Insurance Portability and Accountability Act (HIPAA), a crucial federal law in the United States that oversees the privacy and security of Personal Health Information (PHI).
POPIA
Certus complies with the South African Protection of Personal Information Act (POPIA), which is designed to regulate the processing of personal information by both public and private entities in South Africa. POPIA sets forth principles to ensure the lawful and responsible handling of personal data, with the primary objective of safeguarding individuals’ privacy rights.
KVKK
Certus complies with the regulations set forth by the Turkish Data Protection Authority (KVKK), ensuring that individuals’ privacy rights are protected and data protection practices are upheld in Turkey.
DPDPA
Certus complies with the Digital Personal Data Protection Act, 2023 (DPDP Act or DPDPA-2023). This legislation of the Indian Parliament ensures that digital personal data is processed in a manner that respects the rights of individuals to protect their personal data while recognizing the legal purposes for processing such data.
