# Does NetSenX hold ISO 27001 or SOC 2 certification?

Not today, and we say so plainly. NetSenX holds no ISO/IEC 27001 certificate and no SOC 2 report. SOC 2 Type I and ISO/IEC 42001 are in preparation, which means the work is under way and nothing has been awarded; we will update this page when an independent body issues something you can verify. What you can check now: the data processing agreement published on the website, with its list of sub-processors and their locations; where customer data is stored, with the database in Ireland and the API in Frankfurt and Paris; the security page; and our responsible disclosure policy for reporting vulnerabilities. We answer security questionnaires, and if your procurement requires a certificate we cannot yet provide, tell us early so you can decide with full information rather than discover it late. Some of our sub-processors hold their own certifications, which the data processing agreement lists; those cover their services, not NetSenX. If a supplier ever claims a certificate, ask for the certificate itself, its scope and the issuing body, and check it with that body.

FAQ: [Security standards: ISO 27001, SOC 2](https://netsenx.com/en/faq/standards) · https://netsenx.com/en/faq/what-certifications-does-netsenx-hold

## Read next

- https://netsenx.com/en/compliance
- https://netsenx.com/en/security
- https://netsenx.com/en/nis2-readiness

## Related questions

- [What is the NIST Cybersecurity Framework 2.0?](https://netsenx.com/en/faq/what-is-nist-csf-2)
- [What is BSI IT-Grundschutz?](https://netsenx.com/en/faq/what-is-bsi-it-grundschutz)
- [What is the difference between a certification and an attestation report?](https://netsenx.com/en/faq/certification-vs-attestation-what-is-the-difference)
- [How do we prepare for our first ISO 27001 certification audit?](https://netsenx.com/en/faq/how-to-prepare-for-a-first-iso-27001-audit)
- [What is ISO/IEC 27001, in plain terms?](https://netsenx.com/en/faq/what-is-iso-27001)