Certifications and licences

Openapi adopts a strategy of certifications and attestations aimed at the global recognition of the quality and compliance of its infrastructures and services with national and international standards and regulations.

Quality Certification Standard UNI EN ISO 9001:2015

Openapi SpA is an UNI EN ISO 9001:2015 certified company, certificate number 3482 issued by Istituto Giordano and Accredia. The standards of the ISO 9000 family give indications on how a company must operate in order to provide a quality product or service, i.e. one that meets the customer's requirements.

Quality Certification of Data UNI CEI ISO/IEC 25012:2014

The ISO/IEC 25012:2008 standard, adopted as the Italian standard UNI ISO/IEC 25012:2014, defines a set of specific characteristics for data quality characterization: accuracy, timeliness, completeness, consistency, credibility, accessibility, understandability, compliance, efficiency, precision, confidentiality, traceability, availability, portability, and recoverability. Openapi is certified ISO 25012:2014 with certificate number 023I-OPNP-25012.

ISO/IEC 27001:2022 Information Security Management Certification

Openapi SpA is an ISO/IEC 27001:2022 Certified Company. The international standard ISO/IEC 27001 specifies the requirements for establishing, implementing, maintaining, and continually 1 improving an information security management 2 system (ISMS). This certification attests that Openapi SpA adopts a systematic and proactive approach to managing and protecting sensitive information, ensuring the integrity, confidentiality, and availability of company and customer data.  

TULPS Certification

Openapi SpA has the public security licence TULPS (prot. nr. 397665/Area I TER O.S.P.), a particular authorisation that must be possessed by those who intend to carry out activities that fall under the discipline of the Consolidated Law on Public Security (TULPS in Italian). Click here to see the documentation

Business Messaging Service Authorization

Department for Digital, Connectivity and New Technologies. Directorate General for Digital and Telecommunications - Higher Institute of Communications and Information Technologies.

Security clearance (NOS in Italian)

The Presidency of the Council of Ministers and the Department of Information for Security D.I.S. communicates the favorable outcome of the investigation by issuing the Preventive Authorisation (AP) level "HIGHLY CONFIDENTIAL" with NATO qualification SP-25479-AP.

SecurityMetrics PCI validation certification logo

Openapi met the PCI data security requirements by passing a SecurityMetrics® Vulnerability Assessment. Openapi is tested quarterly to ensure that high security standards are maintained

SOC 1 TYPE II AND SOC 2 TYPE II certificates

The security level of the Private Cloud is also recognised by the SOC 1 type II (SSAE 16 and ISAE 3402) and SOC 2 type II certificates. These international certifications guarantee the adequacy and effectiveness of the internal controls associated with the security of the information system.

Certification PCI-DSS

Openapi's Private Cloud is PCI-DSS Level 1 certified. This certification enables customers to benefit from a PCI SSC (PCI Standard Security Council) compliant infrastructure for storing and processing payment card data.

STAR self-assessment - Cloud Security Alliance

This initiative informs customers about the compliance of their Cloud Computing services with CSA best practices and specifies the measures taken to ensure the security of the information system.

Certification OpenStack Powered

Infrastructure Donor of the OpenStack Foundation in 2015, the server provider company achieved OpenStack Powered certification in October 2016. The company is now working with other providers in the community on OpenStack standardisation, to ensure users can enjoy compatibility between different services.

Kubernetes Software Compliance

Achieving Kubernetes software compliance for many of the latest versions of the most widely used container orchestration system. This certification, issued by the Cloud Native Computing Foundation (CNCF), ensures interoperability between different Cloud providers and commercial Kubernetes distributions.

Patent

SmartFire Patent and registered Trademark

SmartFire is a patent owned by Openapi SpA. The SmartFire brand is a registered and protected trademark, the use of which is only allowed with prior written authorisation from Openapi SpA.

Registrations

National Research Register

The company Openapi SpA is duly registered with the National Research Register issued by the Ministry of Education, University and Research under Code 62075MDL.

Registration to MEPA Acquisti in Rete PA

Openapi SpA is regularly registered to Mepa through the site "Acquisti in rete pa" Consip and M.E.F. Ministry of Economy and Finance with the identification code 1602049.

Registered to NIC

Openapi is an Official Services Provider and Maintainer registered to the Pisa NIC with the code AVS-REG.

National Communications Operators' Registry (ROC) Authorised Operator

Openapi is an authorized National Communications Operators' Registry operator (ROC) with registration number 37776.

Affiliations and memberships

ANCIC

National Association of Business Information and Credit Management Companies (Italian)

CONFCOMMERCIO

Italian General Confederation of Enterprises, Professional Activities and Self-Employed Work.

ASSINTEL

Assintel is the national association of ICT and Digital Companies of Confcommercio - Imprese per l'Italia

ODM

Openapi respects the Code of Ethics and Conduct in Processing Personal Data for Business Information Purposes issued by the Italian Data Protection Authority

Special Acknowledgments

Recognition of Solidarity Contributors

The Acknowledgement is issued by the Minister of Economy and Finance of the Italian Republic Roberto Gualtieri as Solidarity Contributors during the period of the COVID-19 Pandemic.

Legality Rating Score

Openapi is registered in the public list of companies with a Legality Rating held by the Italian Competition Authority (AGCM), with a score of “Star ++” meaning that the company complies with high standards of legality and operates according to the principles of lawfulness, fairness, and transparency v