Certifications · ISO 9001 and ISO/IEC 27001

Independently audited, not just self-declared.

Our ISO 9001 and ISO 27001 certifications, independently audited by Swiss Safety Center AG, and what they mean for how we operate.

View certificates Get in touch
ISO 9001 since 2013 ISO/IEC 27001 since 2015 Audited annually Swiss Safety Center AG
Jump to
Use Cases Certificates Meaning Audits FAQ
Use cases

Sound familiar?

“We have to pass an audit.”

How our certifications help you

You can download both certificates directly, with registration number and validity. If you need further documentation for your compliance process, get in touch.

“Our tender asks for proof of quality and security.”

How our certifications help you

ISO 9001 covers our quality management, ISO/IEC 27001 our information security management. Both are independently audited and cover the same scope.

“We need to know how our provider handles risks.”

How our certifications help you

ISO 27001 requires a documented risk treatment plan and a Statement of Applicability, covering the specific technical, physical and organisational controls we apply.

“We also care about the data centres.”

How our certifications help you

Our two data centres hold their own certifications, including Uptime Institute Tier IV. You’ll find the full overview under certifications on docs.nine.ch.

Our certifications

ISO 9001 and ISO/IEC 27001

Both certifications cover the same scope: development and operation of public and private cloud-based PaaS and SaaS solutions and related consulting services.

ISO 9001ISO/IEC 27001
Management systemQuality management system (QMS)Information security management system (ISMS)
What it coversHow we plan, deliver and continuously improve our servicesHow we identify, manage and reduce information security risks
What the standard requiresFormally tracking customer feedback and complaints, feeding them into regular management reviews that drive concrete process improvementsA documented risk treatment plan and Statement of Applicability, covering the specific technical, physical and organisational controls we apply
Registration no.13-282-09815-282-908
Initially certified20132015
Valid until16 October 202815 December 2027
CertificateView certificateView certificate
What it means for you

What ISO 9001 and ISO 27001 mean in practice

ISO 9001

A quality management standard. We run our services according to documented, repeatable processes, with defined responsibilities and continuous improvement built in, rather than relying on individual habits or tribal knowledge.

ISO 27001

An information security management standard. We systematically identify risks to the confidentiality, integrity and availability of data, and apply and review controls to address them, from access management to incident response.

For you

A provider whose quality and security practices are independently verified, not just self-declared. And these practices apply consistently across our organisation, not only to individual products.

Independently audited

Why we’re certified

  1. 01

    Ongoing management system

    Certifications aren’t a one-time badge. Both standards require a management system that we run on an ongoing basis.

  2. 02

    Annual audit

    An accredited, independent body reviews our processes every year.

  3. 03

    Recertification every three years

    Every three years, both certifications are renewed in full.

Swiss Safety Center AG

Our certification body is Swiss Safety Center AG, a company of the SVTI Group and member of the TÜV Association. That means our processes for quality and information security are reviewed by someone other than ourselves, on a recurring basis, not just documented once and left untouched.

FAQ

Frequently asked questions

Who audits your certifications?
Swiss Safety Center AG, a company of the SVTI Group and member of the TÜV Association. They audit us annually and recertify us every three years.
What scope do the certifications cover?
Both cover the same scope: development and operation of public and private cloud-based PaaS and SaaS solutions and related consulting services.
Where can I find the certificates?
You can download both directly: ISO 9001 and ISO/IEC 27001.
Which certifications do your data centres hold?
The certifications of our data centre operators each apply only to the respective data centre. Both, NTT Zürich and NTS / ColoZüri, are Uptime Institute Tier IV. You’ll find the full overview per location under certifications on docs.nine.ch.
Are there assurance reports such as ISAE 3402 or for FINMA?
For the NTT Zürich data centre, an ISAE 3402 Type II report and an ISAE 3000 Type 1 report (FINMA), among others, are available on request, partly subject to confidentiality requirements and potential costs. Details under certifications on docs.nine.ch.
I need further documentation for an audit or tender.
Get in touch if you need additional documentation for your own compliance process. You’ll find our technical and organisational measures in the TOMs on docs.nine.ch.
From the docs

Go deeper on docs.nine.ch

Certifications →Our certifications and those of our data centres at a glance. Technical and organisational measures (TOMs) →How we protect data technically and organisationally. Data centre locations →Where our infrastructure is located.
Read on

You might also be interested in

Everything about how we operate Trust Centre →Climate protection, data centre infrastructure and security. How we compensate our CO₂ emissions ClimateCare →Certified myclimate projects, for your products too if you like. How do we secure the rest? Security →How we protect our infrastructure and your workloads.

Need our certificates for an audit or tender?

Download both certificates, or get in touch if you need additional documentation for your own compliance process.

Get in touch View certificates

Talk to our experts

Do you have questions about our products? No problem. Contact our sales department or go directly to your Cockpit to see all the possibilities at Nine.

Contact Sales Go to Cockpit

Subscribe to our newsletter for the latest updates: