What we do · Operations
ISO certifications and assurance packets
Your auditors will ask how your hosting provider manages security, quality, the environment and integrity. We can answer with certificates. EuroVPS holds ISO/IEC 27001 with ISO/IEC 27017 and 27018, ISO 9001, ISO 14001 and ISO 37001, and we assemble a complete assurance packet for your auditor in a day.
What it is
Four management-system certifications, issued in September 2026 by RIGCERT, a certification body accredited by ESYD, the Hellenic Accreditation System, all with the same scope: "Managed datacenter hosting service". The certificates are valid to September 2027, within a certification cycle running to 2029, with annual surveillance audits.
- ISO/IEC 27001, information security management, including the controls of ISO/IEC 27017 (security for cloud services) and ISO/IEC 27018 (protection of personal data in cloud services).
- ISO 9001, quality management.
- ISO 14001, environmental management.
- ISO 37001, anti-bribery management.
Alongside our own certificates, our datacenter operators provide theirs. Digital Realty Athens supplies its own independent audit reports (SOC 2 Type II, PCI DSS) under NDA, together with its own ISO certificates. Our Amsterdam datacenter publishes its own certifications, and we obtain copies on request.
How we build it
Certification is the audit of a system we already run, not a folder of policies written for the auditor. The controls the standards ask for are the ones described across these pages:
- Access control and segregation: an air-gapped management network, keys-only administrative access through our own gateways, separate trust tiers that never share firewall objects.
- Backup integrity: pull-only backup, where the backup side pulls and production has no path to the backup plane at all, enforced at the firewall.
- Operations security: SELinux enforcing, host and perimeter firewalls, same-day patching from our own package mirror, routine platform upgrades with a written rollback.
- Monitoring and logging: fleet monitoring with alarms to engineers in seconds, central logging from every device, DDoS detection at the border, and watchdogs on the watchers.
- Asset management: every device, port, cable and address tracked end to end in our DCIM.
- Change management: backup before every change, one change at a time, verified live, with a stated rollback.
The assurance packet
When a customer's auditor, a tender or a group compliance team needs evidence, we assemble a packet:
- An index of what is included and what each document proves.
- A one-page signed statement on our letterhead: the services we provide, the locations, the certifications and their scope, and the key controls.
- Our four certificates, with the accreditation certificates of the body that issued them.
- The datacenter operator assurance packs, with NDA handling noted.
- A cover note addressed to your auditor or tender team.
What it protects you from
- An audit finding against your provider that becomes a finding against you.
- A tender lost because the assurance documents arrived late.
- Certificates whose scope does not cover the service you buy.
- A provider who claims compliance without independent certification.
- Weeks of back-and-forth assembling evidence piece by piece.
In practice
A partner's tender, answered the same day. A digital agency needed assurance for a public-sector tender within days. We delivered a complete packet the same day: the signed statement, our four fresh certificates, the accreditation proofs and the Digital Realty assurance pack, ready to submit.
Why EuroVPS
- Four ISO certifications, one clear scope: managed datacenter hosting.
- ISO/IEC 27017 and 27018 controls for cloud security and personal data.
- Datacenter operator SOC 2 Type II and PCI DSS evidence available.
- A complete assurance packet in a day, not weeks.
FAQ
Can I see the certificates? Yes. Ask us and we send copies with the accreditation certificates of the issuing body.
Does the scope cover the service I buy? The scope is "Managed datacenter hosting service". Tell us what you buy and we confirm how it falls within that scope.
Can you fill in our security questionnaire? Yes. We answer security questionnaires from the same evidence that backs our certifications.
If your auditor needs answers, Talk to an engineer.
Your next infrastructure partner
Let’s look at
your setup.
Tell us what you run today and what needs to improve. An engineer will review your brief and help you plan the next step.
+357 222 32280
who will look after your infrastructure.
Let’s start with your setup.
A little context helps us start the right conversation.