Since 13 October 2026 INGATE has been certified to ISO/IEC 27001:2022. The certificate was issued by British Assessment Bureau, a UKAS-accredited certification body. INGATE is also certified to ISO/IEC 27017:2015, the code of practice for information security in cloud services.
Scope
The certified information security management system covers all INGATE products and services: colocation, root servers, HA and GPU servers, public, private and hybrid cloud, network infrastructure and connectivity, data management and managed services. The Statement of Applicability excludes none of the controls in Annex A of ISO/IEC 27001.
Validity and verification
- Valid until: 12 October 2029
- Surveillance: annual audits by the certification body
- Certificate numbers: 271818 (ISO/IEC 27001) and 275421 (ISO/IEC 27017)
Both certificates can be verified by number on the certification body's verification page.
What this means for customers
- Supplier assessment: Companies with their own ISMS or obligations under NIS2 and DORA can use the certificate as evidence in their supplier assessment.
- Data processing: The certificate provides independent evidence of the technical and organisational measures required by Art. 32 GDPR.
- Cloud: ISO/IEC 27017 requires provider and customer responsibilities to be defined, including the return and deletion of data at the end of the contract.
The data centres we use remain ISO 27001 certified as well. All details on the certificates are on our About page.
