Trust
Security
What is certified, where data is hosted, how it is protected, and which documents are published or available on request.
Security, quality or procurement questions.
Hosting and data protection
- Platform hosting
- Within the EU, on AWSWith audit trails, access controls and data integrity safeguards
- Encryption
- In transit and at restOn ISO 27001 certified cloud providers
- Access
- Per user and per roleSingle sign-on (SSO) supported
- SOC 2 Type 2
- Audited annuallyReport on request during due diligence
Certifications and audits
- ISO/IEC 27001:2022 certified information security management.
- ISO 9001:2015 certified quality management.
- Annual SOC 2 Type 2 audit.
- Platform validated to comply with FDA 21 CFR Part 11 and EU GMP Annex 11.
- GDPR-compliant data processing.
Controlant's information security management system is compliant with ISO 27001 standards and has been certified by an independent auditor. Our third-party cloud providers are ISO 27001 certified for information security, and we regularly audit and assess our own systems and services for compliance.
Hosting
Platform data is hosted within the EU on AWS, with comprehensive audit trails, access controls, and data integrity safeguards.
Data protection
Data is encrypted in transit and at rest, on ISO 27001 certified cloud providers.
Access is granted per user and per role, over shipments, locations and templates, and covers read, create, modify, approve and delete. Customers can sign in with single sign-on (SSO).
We conduct background checks as necessary, train team members on our security policies, and keep our offices physically secure.
Availability and business continuity
Live service health for each platform component, and the incident history, are published on Controlant Status.
Controlant's contingency plans include measures to ensure business continuity in all locations in which we operate.
Reviewing Controlant as a supplier?
Tell us who is running the review and what it covers, and the right person will reply.