Certifications and compliance
Proven security, certified compliance
The Open Telekom Cloud meets the highest standards for security and data protection – backed by a wide range of international certifications and industry-specific regulations. Whether it’s information security, data privacy, or regulatory compliance, you can rely on a thoroughly tested and independently audited infrastructure that is regularly reviewed by third-party experts.
Our key certifications at a glance
ISO 27001
International standard for certified information security management
ISO 27018
Standard for the protection of personal data in the cloud
TISAX
IT security standard specific to the automotive industry
BSI C5 (Typ 2)
Cloud security standard from the German Federal Office for Information Security
SOC 2
Assessment of the effectiveness of security controls based on the Service Trust Principles
Trusted Cloud data protection profile
Audit certification for GDPR-compliant cloud computing
The Open Telekom Cloud also complies with several other important certifications, including ISO 27017 for cloud-specific security measures, ISO 22301 for business continuity management, and ISO 9001 for standardized quality management. It also meets legal requirements such as Section 203 of the German Criminal Code (StGB) for the protection of sensitive professional secrets and Section 35 of the German Social Code (SGB) for secure processing of social data.
With the Open Telekom Cloud, you eliminate regulatory uncertainties such as Schrems II or the US CLOUD Act. Our cloud is fully GDPR-compliant, hosted entirely in Europe, and free from US legal influence – ensuring maximum data sovereignty and long-term legal certainty.
Find out more on our Data Sovereignty and Security page.