Security and compliance.
At nLighten the security and privacy of your data is our top priority. We comply with relevant security and privacy regulations and adhere to industry best practices, including ISO 27001, ISO 9001, ISO 14001, ISO 50001, PCI-DSS, SOC1, HDS, FINMA, BSI IT GrundSchutz.
We continuously invest in our security infrastructure and personnel to ensure your data is always protected.

Data Center Certifications.
Customers may request to view copies of nLighten certifications by contacting their Customer Success Manager.
The menu below provides a comprehensive overview of certifications for each data center. We continuously review industry standards and assess new certifications on a case-by-case basis for potential inclusion.
Filter (regions / types)

FRANCE.
GERMANY.
NETHERLANDS.
SWITZERLAND.
UNITED KINGDOM.
Certifications explained.
ISO/IEC 27001 (Information Security Management)
Globally recognized standard for information security management, ensuring confidentiality, integrity, and availability of your data. We’ve implemented an Information Security Management System (ISMS), including risk assessments, security controls, and regular monitoring, which is certified for all our locations.
ISO 9001 (Quality Management)
This standard sets out the criteria for a quality management system. Our Quality Management System (QMS) ensures consistent service quality and customer satisfaction by defining processes, measuring performance, and continuously improving our services.
ISO 14001 (Environmental Management)
This standard sets out the criteria for an environmental management system. Our Environmental Management System helps us reduce our carbon footprint and conserve resources.
ISO 50001 (Energy Management)
PCI-DSS
This standard ensures the protection of your sensitive payment card information. We have implemented a comprehensive set of security requirements, including building a secure network, protecting cardholder data.
SOC 1
This report provides independent assurance over our internal controls related to security, availability, and confidentiality. Conducted by an independent auditor, it covers areas such as security, availability, processing integrity and confidentiality.
HDS
(Hébergeurs de Données de Santé) This certification ensures compliance with the French Public Health Code for companies holding health data, requiring us to implement strict security and privacy measures to protect sensitive patient information.
REPRESENTATION OF GUARANTEES
Business name of the actor: nLighten HQ BV which represents nLighten, its subsidiaries, and its affiliated entities.
DATA CENTER | ROLE IN THE HOSTING SERVICE | HDS ACTIVITY | LOCATION OF ACTIVITY | HDS CERTIFIED | LEGAL GUARANTEES IN THE EVENT OF TRANSFER | Access to personal health data from countries outside the European Economic Area, by the Host or one of its processors | SecNumCloud 3.2 qualified | Host or processor subject to a risk of access to personal health data from countries outside the European Economic Area, imposed by the legislation of a third country in breach of EU law |
---|---|---|---|---|---|---|---|---|
NL.AMS2 |
HOUSE |
Main Location of the ISMS |
Gyroscoopweg 134-140, Koolhovenlaan 120 1119 Schiphol-Rijk The Netherlands |
YES |
Non applicable |
NO |
NO |
NO |
FR.PAR1 |
HOUSE |
Activity 1 - Data Center Housing |
3-5 Mail Bartélémy Thimonnier Newton A 77185 Lognes France |
YES |
Non applicable |
NO |
NO |
NO |
FR.PAR2 |
HOUSE |
Activity 1 - Data Center Housing |
34 Rue Des Gardinoux 93300 Aubervilliers France |
YES |
Non applicable |
NO |
NO |
NO |
FR.LYS1 |
HOUSE |
Activity 1 - Data Center Housing |
45-47 Rue Francis de Pressensé 69100 Villeurbanne France |
YES |
Non applicable |
NO |
NO |
NO |
FR.NCE1 |
HOUSE |
Activity 1 - Data Center Housing |
49 Rue Emile Hugues 06600 Antibes, Sophia-Antipolis France |
YES |
Non applicable |
NO |
NO |
NO |
FR.NCE2 |
HOUSE |
Activity 1 - Data Center Housing |
930 Route des Dolines 06560 Valbonne, Sophia Antipolis France |
YES |
Non applicable |
NO |
NO |
NO |
FR.MLH1 |
HOUSE |
Activity 1 - Data Center Housing |
2 Rue Albert Einstein 25000 Besançon France |
YES |
Non applicable |
NO |
NO |
NO |
FR.SXB1 |
HOUSE |
Activity 1 - Data Center Housing |
Rue Jean-Dominique Cassini 67400 Illkirch-Graenstaden France |
YES |
Non applicable |
NO |
NO |
NO |
FINMA
This certification ensures compliance with Swiss financial market regulations, requiring us to implement strict security measures to protect financial data and transactions. This includes data protection, IT security, and operational risk management.
IT Grundschutz
This certification demonstrates our implementation of the German Federal Office for Information Security’s (BSI) baseline security standards. This allows us to work with federal agencies and organizations in Germany that require strict security measures and provides a strong foundation for our information security management system.
EN 50600
This standard ensures our data centers are designed and operated for high availability, security, and energy efficiency. It covers various aspects of data center infrastructure, including building construction, power distribution, environmental control, telecommunications cabling infrastructure, and security systems.
