Certification
sinnograte is ISO 27001 certified for development and operation. This applies to the software we develop for customers as well as to the platforms we operate ourselves.
The certificate and its scope are available for inspection. Ask for it and we will send it to you.
This website
This website uses no analytics services and no cookies. Fonts and graphics are served from our own server. The only connection to a third party is the map on the contact page, which loads its tiles from OpenStreetMap. We protect the contact form against spam ourselves. The details are in our privacy policy.
Reporting a vulnerability
If you find a vulnerability in our software, our platforms or this website, please write to office@sinnograte.at. Tell us what you found and how it can be reproduced.
We confirm receipt within two working days and get back to you with an assessment. Anyone who reports a vulnerability responsibly and gives us time to fix it has nothing to fear from us.
Documents on request
Some evidence is not public. On request and, where necessary, under a non-disclosure agreement, you will receive:
- ISO 27001 certificate with its scope
- Data processing agreement under Art. 28 GDPR
- List of sub-processors
- Technical and organisational measures
Product Trust Centers
HVACloud has its own Trust Center with information on data location, tenant separation and data sovereignty.