Trust Center
Security, compliance & data protection
In the Netstream Trust Center, you will find all information on our certifications, security standards and data protection measures.
Trust Center
Trust is based on transparency.
As an ISO/IEC 27001:2022-certified Swiss cloud and streaming provider, we operate all our services in Switzerland. Our information security management system (ISMS) is audited annually by an independent, accredited certification body.
Compliance & data protection
For us, transparency is not a marketing term but everyday practice.
Netstream meets all regulatory requirements for a Swiss cloud and streaming provider. From the revised Federal Act on Data Protection (FADP) to industry-specific regulations and contractual security standards – our policies and documents are openly available to you here.
- Terms and conditionsGeneral terms and conditions for all Netstream services
- Privacy policyHow we collect, process and protect personal data
- Data processing agreement (DPA)Fully integrated into our terms and conditions. No separate contract required
- TOMSpecific security measures to protect your data
- SubprocessorsCurrent, publicly available list of all subprocessors
Certifications & standards
Security and quality are not promises – they are measurable.
Netstream is certified to international standards and holds recognised Swiss quality labels. Independent auditors regularly confirm that our processes, systems and data centers meet the highest requirements.
ISO/IEC 27001:2022
Certified since 2022 – without exclusions. All cloud and streaming services and all areas of the company are covered. Compliance is audited annually by an independent, accredited certification body.
Data center standards
Our additional Swiss data center locations meet ISO 27001, ISO 9001, ISO 14001, ISO 50001, EN 50600, PCI DSS and ISAE 3402 – from quality and energy management to credit card security and control of outsourced processes.
swiss hosting
Your system data stays in Switzerland. We store and process it in our own data centers, on Swiss infrastructure and under Swiss law.
Swiss Made Software
The label confirms: at least 60% Swiss value share, the main manufacturing process in Switzerland and a registered office in the Swiss commercial register. It is based on the Trade Mark Protection Act (Art. 48–48d TmPA).
ISO 27001:2022
We are certified to ISO/IEC 27001 – and proud of it.
ISO/IEC 27001 is the leading international standard for information security management systems (ISMS). With the certification, companies demonstrate that they have an effective ISMS to protect information, data and systems from unauthorised access. To determine certification, an official audit body audits the conditions, processes and documentation in place in the company.
What does ISO 27001 certification attest to?
Information security is increasingly becoming an indispensable part of good corporate governance. An information security management system (ISMS) in accordance with the international standard ISO/IEC 27001 provides a risk-based and cost-optimised basis for meeting the ever-increasing requirements for information security.
ISO/IEC 27001 promotes awareness that information must be protected as an asset (company-wide awareness). It brings about the identification and minimisation of information security risks, ensures the legal and contractual basis and fosters trust in dealings with customers, public organisations and in e-commerce.
What is the scope?
Development and provision of IT solutions in the areas of cloud and streaming
What is an information security management system (ISMS)?
An information security management system (ISMS) is the set of procedures and rules within an organisation that serve to permanently define, manage, control, maintain and continuously improve information security.
The term is defined in the ISO/IEC 27002 standard.
Which areas of Netstream were certified?
Netstream had the entire organisation (Netstream AG & Netstream Cloud AG) certified, including its data centers. There were no exclusions.
Since when has Netstream been ISO 27001 certified?
Netstream was first certified in March 2022.
How long is the certification valid?
Certification is sought for three years at a time. In the spirit of continuous improvement, a surveillance audit takes place every year and a recertification audit after three years.
Handling sensitive data is an extremely important topic both for our customers and for us. With the certification, we can now prove to our customers beyond doubt that we comply with the relevant IT security standard and support them as a competent partner.
Certification body
The Swiss Association for Quality and Management Systems (SQS) is an organisation for certifications and for carrying out inspections and audits, and in this context it has audited the ISMS of Netstream AG.
Partnerships
Sustainability
Protecting the environment and the climate is very close to our hearts.
Because future generations should still be able to enjoy our beautiful planet. But sustainability takes more than just a vision. That is why we have been running our offices and the entire data center on 100% solar power since 2018. In 2021, Netstream was accepted into the “VMware Zero Carbon Committed” initiative and thus champions a sustainable cloud. In addition, we support various sustainable projects in Switzerland and abroad every year.
What our customers and partners say
Netstream supports us as a service partner for our streaming platform Joyn in Switzerland. As a Netstream customer, we can confirm that Netstream has supported us very well in every respect with its quick responsiveness and competent support. Netstream played a major part in launching Joyn on schedule and in ensuring that Joyn runs smoothly. We sincerely thank Netstream for this and look forward to continuing our collaboration.
FAQ
Frequently asked questions
Where is my service contract?
Most of our solutions are standardised and do not require a separate service contract. The basic legal aspects are governed by the terms and conditions.
What is the availability of my service?
If there is no separate arrangement for the service, the standard of 99.9% per year applies.
How quickly does Netstream report a security incident?
We continuously publish disruptions and outages on status.netstream.ch. We inform you directly about security incidents affecting your data or services, usually within a few hours. If personal data that we process on your behalf is affected, we inform you within 48 hours at the latest. We agree special requirements for the notification period with you in a binding manner.
Does Netstream support customers supervised by FINMA?
Yes. For your assessment of an outsourcing arrangement, we provide all available documents: in the Trust Center and, on request, further evidence under a non-disclosure agreement. Completing customers’ own questionnaires and compiling specific documentation are not included. We offer these services on a time and materials basis. Audit and inspection rights as well as special notification periods are agreed individually in the contract.
Does Netstream offer a right to audit?
Our information security is audited annually by an independent, accredited body as part of the ISO/IEC 27001 certification. For the processing of personal data, our data processing agreement grants an annual right to audit. Further audits, for example of operations, security or compliance, are possible by individual agreement, with prior notice and on a time and materials basis.
Does your company have special regulatory requirements?
Get in touch with us to discuss individual contractual requirements.