ISO/IEC 27001:2022
Our ISMS is officially certified. Not a tick-box exercise, but a thorough, independent audit.
Certifications & compliance
Independently certified,
down to the last detail
Our approach to information security is set out in black and white and externally verified by people who make this their profession.
GDPR & DPA
We comply with GDPR, right down to the small print. The Belgian Data Protection Authority approves too.
Scope
From development to hosting: every step of our Mobility-as-a-Service platform falls under this certification.
How we protect your data
Security at every level
A look behind the scenes: these are the measures keeping your data safe.
Encryption
In transit or at rest: your data always travels encrypted. HTTPS is used everywhere.
Access control
No key, no entry: least-privilege access, attribute-based authorisation, and mandatory MFA for every administrator.
Secure infrastructure
Our private cloud is neatly segmented. We continuously scan for vulnerabilities and patch fast.
Secure development
We build security in from day one ("shift-left") and regularly have independent experts try to break in.
Our people
Our colleagues are screened, follow clear onboarding and offboarding procedures, and receive ongoing security-awareness training.
Governance
A certified ISMS with well-considered policy, risk management, and internal audits that no one skips.
Hosting & data storage
Your data never
leaves the EU
Our platform runs on Amazon Web Services (AWS), entirely within the EU (Dublin, Ireland region). We have no offices, and therefore no data storage, outside the EU.
Privacy
We maintain a GDPR data register, carry out an annual DPIA, and take data subjects' rights seriously.
View our privacy policy
Report a vulnerability
Found something that shouldn't be there? We appreciate it. Report it responsibly to our security team via the button below. We'll handle it quickly and thoroughly.
Contact the security team
Got questions?
Want to know more about privacy or data protection? Our privacy expert is happy to help.
Contact the privacy team
Extensive documentation
Request our security documentation
Need more information for your security review? Fill in the form. Once we've verified your identity, we'll send you the requested documents. We deliberately don't send these automatically.
We only collect this data to verify your identity and process your request. Your data will be deleted once your request has been handled (within 30 days at the latest), unless you explicitly consent to commercial follow-up alongside it. More information in our Privacy Policy or via privacy@olympus-mobility.com.