Certifications and licences

Openapi adopts a strategy of certifications and attestations aimed at the global recognition of the quality and compliance of its infrastructures and services with national and international standards and regulations.

Quality Certification Standard UNI EN ISO 9001:2015

Openapi SpA is an UNI EN ISO 9001:2015 certified company, certificate number 3482 issued by Istituto Giordano and Accredia. The standards of the ISO 9000 family give indications on how a company must operate in order to provide a quality product or service, i.e. one that meets the customer's requirements.

Quality Certification of Data UNI CEI ISO/IEC 25012:2014

The ISO/IEC 25012:2008 standard, adopted as the Italian standard UNI ISO/IEC 25012:2014, defines a set of specific characteristics for data quality characterization: accuracy, timeliness, completeness, consistency, credibility, accessibility, understandability, compliance, efficiency, precision, confidentiality, traceability, availability, portability, and recoverability. Openapi is certified ISO 25012:2014 with certificate number 023I-OPNP-25012.

Certification Server ISO/IEC 27001

Openapi's cloud servers have obtained ISO/IEC 27001:2013 certification for the IT security management system implemented on their dedicated servers. The ISMS for dedicated servers is based on the certification of the datacenter concerned and is valid for all servers hosted in the certified facilities. The compliant datacentres are currently those of Roubaix (RBX 2,3,5,6,7), Strasbourg, Beauharnois, Singapore and Sydney.

TULPS Certification

Openapi SpA has the public security licence TULPS (prot. nr. 397665/Area I TER O.S.P.), a particular authorisation that must be possessed by those who intend to carry out activities that fall under the discipline of the Consolidated Law on Public Security (TULPS in Italian). Click here to see the documentation

Security clearance (NOS in Italian)

The Presidency of the Council of Ministers and the Department of Information for Security D.I.S. communicates the favorable outcome of the investigation by issuing the Preventive Authorisation (AP) level "HIGHLY CONFIDENTIAL" with NATO qualification SP-25479-AP.

SOC 1 TYPE II AND SOC 2 TYPE II certificates

The security level of the Private Cloud is also recognised by the SOC 1 type II (SSAE 16 and ISAE 3402) and SOC 2 type II certificates. These international certifications guarantee the adequacy and effectiveness of the internal controls associated with the security of the information system.

Certification PCI-DSS

Openapi's Private Cloud is PCI-DSS Level 1 certified. This certification enables customers to benefit from a PCI SSC (PCI Standard Security Council) compliant infrastructure for storing and processing payment card data.

STAR self-assessment - Cloud Security Alliance

This initiative informs customers about the compliance of their Cloud Computing services with CSA best practices and specifies the measures taken to ensure the security of the information system.

Certification OpenStack Powered

Infrastructure Donor of the OpenStack Foundation in 2015, the server provider company achieved OpenStack Powered certification in October 2016. The company is now working with other providers in the community on OpenStack standardisation, to ensure users can enjoy compatibility between different services.

Kubernetes Software Compliance

Achieving Kubernetes software compliance for many of the latest versions of the most widely used container orchestration system. This certification, issued by the Cloud Native Computing Foundation (CNCF), ensures interoperability between different Cloud providers and commercial Kubernetes distributions.

Patent

SmartFire Patent and registered Trademark

SmartFire is a patent owned by Openapi SpA. The SmartFire brand is a registered and protected trademark, the use of which is only allowed with prior written authorisation from Openapi SpA.

Registrations

National Research Register

The company Openapi SpA is duly registered with the National Research Register issued by the Ministry of Education, University and Research under Code 62075MDL.

Registration to MEPA Acquisti in Rete PA

Openapi SpA is regularly registered to Mepa through the site "Acquisti in rete pa" Consip and M.E.F. Ministry of Economy and Finance with the identification code 1602049.

Registered to NIC

Openapi is an Official Services Provider and Maintainer registered to the Pisa NIC with the code AVS-REG.

National Communications Operators' Registry (ROC) Authorised Operator

Openapi is an authorized National Communications Operators' Registry operator (ROC) with registration number 37776.

Affiliations and memberships

ANCIC

National Association of Business Information and Credit Management Companies (Italian)

CONFCOMMERCIO

Italian General Confederation of Enterprises, Professional Activities and Self-Employed Work.

ASSINTEL

Assintel is the national association of ICT and Digital Companies of Confcommercio - Imprese per l'Italia

ODM

Openapi respects the Code of Ethics and Conduct in Processing Personal Data for Business Information Purposes issued by the Italian Data Protection Authority

Special Acknowledgments

Recognition of Solidarity Contributors

The Acknowledgement is issued by the Minister of Economy and Finance of the Italian Republic Roberto Gualtieri as Solidarity Contributors during the period of the COVID-19 Pandemic.

Legality Rating Score

Openapi is registered in the public list of companies with a Legality Rating held by the Italian Competition Authority (AGCM), with a score of “Star ++” meaning that the company complies with high standards of legality and operates according to the principles of lawfulness, fairness, and transparency v