Certifications and licences

Openapi adopts a strategy of certifications and attestations aimed at the global recognition of the quality and compliance of its infrastructures and services with national and international standards and regulations.

• 

  Quality Certification Standard UNI EN ISO 9001:2015

  Openapi Srl is an UNI EN ISO 9001:2015 certified company, certificate number 3482 issued by Istituto Giordano and Accredia. The standards of the ISO 9000 family give indications on how a company must operate in order to provide a quality product or service, i.e. one that meets the customer's requirements.
• 

  TULPS Certification

  Openapi Srl has the public security licence TULPS 234801, a particular authorisation that must be possessed by those who intend to carry out activities that fall under the discipline of the Consolidated Law on Public Security (TULPS in Italian).
• 

  National Research Register

  The company Openapi Srl is duly registered with the National Research Register issued by the Ministry of Education, University and Research under Code 62075MDL.
• 

  Registration to MEPA Acquisti in Rete PA

  Openapi Srl is regularly registered to Mepa through the site "Acquisti in rete pa" Consip and M.E.F. Ministry of Economy and Finance with the identification code 1602049.
• 

  Security clearance (NOS in Italian)

  The Presidency of the Council of Ministers and the Department of Information for Security D.I.S. communicates the favorable outcome of the investigation by issuing the Preventive Authorisation (AP) level "HIGHLY CONFIDENTIAL" with NATO qualification SP-25479-AP.
• 

  Registered to NIC

  Openapi is an Official Services Provider and Maintainer registered to the Pisa NIC with the code AVS-REG.
• 

  SmartFire Patent and registered Trademark

  SmartFire is a patent owned by Openapi Srl. The SmartFire brand is a registered and protected trademark, the use of which is only allowed with prior written authorisation from Openapi Srl.
• 

  Certification ISO/IEC 27001

  Openapi's cloud servers have obtained ISO/IEC 27001:2013 certification for the IT security management system implemented on their dedicated servers. The ISMS for dedicated servers is based on the certification of the datacenter concerned and is valid for all servers hosted in the certified facilities. The compliant datacentres are currently those of Roubaix (RBX 2,3,5,6,7), Strasbourg, Beauharnois, Singapore and Sydney.
• 

  SOC 1 TYPE II AND SOC 2 TYPE II certificates

  The security level of the Private Cloud is also recognised by the SOC 1 type II (SSAE 16 and ISAE 3402) and SOC 2 type II certificates. These international certifications guarantee the adequacy and effectiveness of the internal controls associated with the security of the information system.
• 

  Certification PCI-DSS

  Openapi's Private Cloud is PCI-DSS Level 1 certified. This certification enables customers to benefit from a PCI SSC (PCI Standard Security Council) compliant infrastructure for storing and processing payment card data.
• 

  STAR self-assessment - Cloud Security Alliance

  This initiative informs customers about the compliance of their Cloud Computing services with CSA best practices and specifies the measures taken to ensure the security of the information system.
• 

  Certification OpenStack Powered

  Infrastructure Donor of the OpenStack Foundation in 2015, the server provider company achieved OpenStack Powered certification in October 2016. The company is now working with other providers in the community on OpenStack standardisation, to ensure users can enjoy compatibility between different services.
• 

  Kubernetes Software Compliance

  Achieving Kubernetes software compliance for many of the latest versions of the most widely used container orchestration system. This certification, issued by the Cloud Native Computing Foundation (CNCF), ensures interoperability between different Cloud providers and commercial Kubernetes distributions.