ISO/IEC 27001 is the international standard for information security management. Ours is independently audited and publicly verifiable.
Our certificate is listed on IAF CertSearch, the global database of accredited certifications.
Verify on IAF CertSearch
Controls, access reviews and policies monitored continuously — not checked once a year.
Databases and internal services have no public address.
DDoS protection and a web application firewall in front of every app.
Certificates issue and renew automatically. HTTP always redirects.
Engineers reach servers over a private, encrypted network only.
No shared logins. Every action is attributable.
Access revoked the day someone leaves, and reviewed regularly.
Separate databases and credentials per customer. Dedicated plans get their own server.
Stored off the server they protect. Restores are tested.
Germany and the EU as standard. Dedicated regions — UK, EU, US and more — on Compliance.
OS security updates applied automatically; platform upgrades tested first.
Uptime checks and alerts on every service, brute-force protection on every server.
A written plan, and breach notification within 48 hours.
A dedicated region of your choice — UK, EU, US and more — plus audit logging, encryption at rest and in transit, and security documentation written for your buyers.
Email security@shipyon.com. We acknowledge reports within two business days and won’t act against good-faith research.