Compliance & Certifications | HIPAA, GDPR, CCPA

Employees working together | DocuWare compliance and certifications

Building trust with independent testing

DocuWare is tested regularly and certified by independent third-party institutions. The objective audits focus on security as well as processes.

The product and the company comply with international, national and industry standards.

Plus, certifications from other software developers and hardware manufacturers prove: you can seamlessly and securely integrate DocuWare with many other applications.

To work compliant in your business, you are on the safe side with DocuWare having also received many awards by expert organizations and specialist publications.

SOC 2, Type 2

The Service Organization Control (SOC) governs how to report on the status of internal control parameters, including security and availability. It follows the AICPA Trust Services Principles and Criteria. DocuWare is certified for SOC 2, Type 2. Read more about SOC certifications for DocuWare Cloud below.

NF203

DocuWare is NF203 certified for digital safes. This certification issued by AFNOR Certification and INFOCERT in France covers all functional areas of computerized accounting (purchasing, sales, inventory, fixed assets and accounting) as well as digital safes (NF203 CCFN).

GeBüV

The Swiss Business Records Ordinance requires to ensure data completeness, validity, availability and legibility as well as logging the data migrations. DocuWare is certified and supports you in complying with these regulations.

ISO/IEC 27001

DocuWare is certified to ISO/IEC 27001 for the implementation and continuous improvement of its Information Security Management System (ISMS).

DIN EN ISO 9001

DocuWare is certified for its quality management system (QMS) in the area of development, sales and support of software for document management and workflow automation.

Electronic Transaction Software

電子取引ソフト法的要件認証
In Japan, DocuWare fulfils the requirements for "Electronic Transaction Software" in compliance with the 2021 revision set by Japan Image and Information Management Association (JIIMA). DocuWare is certified by the authority.

Electronic Books Maintenance Act

電帳法スキャナ保存ソフト法的要件認証
In Japan, DocuWare fulfils the requirements for "Electronic Books Maintenance Act" in compliance with the 2021 revision set by Japan Image and Information Management Association (JIIMA). DocuWare is certified by the authority.

Qualiopi

DocuWare has been awarded the Qualiopi certificate for its training courses in France by auditor Socotec. The certification attests to the quality of the training processes and provides greater clarity for companies and users regarding the training offered.

NF552 on GDPR

DocuWare has been awarded the NF Software certification on data protection (NF552), issued by INFOCERT with the support of the French Standardization Association (AFNOR). This certificate establishes that the DocuWare solution in version 7 can be used in accordance with the General Data Protection Regulation (GDPR).

GoBD

IDW ERS FAIT3/IDW PS 880: The GoBD are the principles for the proper keeping and storage of books, records and documents in electronic form as well as for data access issued by the German tax authority. DocuWare is certified and enables you in complying with these requirements.

Agencia Tributaria

The Agencia Tributaria (AEAT) is the Spanish tax authority. It prescribes the requirements for archiving paper-based documents as the basis for the deletion policy for paper documents. DocuWare is certified by AEAT.

SAP S/4HANA

DocuWare is certified for integration with and deployment on SAP S/4HANA1709 via the SAP integration scenario S/4-BC-AL 7.40.

e-ARS 2019/SW021

In Slovenia, the Protection of Documents and Archives and Archival Institutions Act (ZVDAGA) refers to the support of the complete digital content management process (archive and documentary). DocuWare is certified by the authority.

SÄHKE2

In Finland, DocuWare fulfils the requirements set by the National Archives’ Certification of electronic information systems to SÄHKE2 criteria.

DocuWare is certified by the authority.

HIPAA

The US Health Insurance Portability and Accountability Act regulates the protection of sensitive health information to prevent it from being disclosed without the patient’s consent or knowledge. There is no official HIPAA certification available at the moment. However, DocuWare enables you to secure data and documents to ensure HIPAA compliance.

CCPA

The California Consumer Privacy Act governs how companies around the world must handle the personal information of California residents. Any violation of the rules may result in high penalties. Currently, there is no CCPA certification. With DocuWare, you can store and process data and documents to ensure CCPA compliance.

GDPR

The European General Data Protection Regulation addresses the protection of personal data in the EU and the EEA. It affects EU-based companies and foreign companies operating in the EU. Currently there is no GDPR certification. DocuWare enables you to store and process data and documents to ensure GDPR compliance.

APPI

The Act on Protection of Personal Information applies to all companies in Japan that process personal information. It has an international scope of application similar to the EU GDPR. There is currently no certification for it. DocuWare enables your company to secure data and documents to ensure APPI compliance.

POPIA

The Protection of Personal Information Act requires companies in South Africa to protect personal information collected from unauthorized access, unlawful use or loss and to obtain the consent of the individual. There is no POPIA certification. DocuWare enables you in complying with these requirements.

SOX

The Sarbanes-Oxley Act is a US federal law administered by the Securities and Exchange Commission (SEC). Among other directives, SOX requires publicly traded companies to have proper internal control structures in place to validate that their financial statements accurately reflect their financial results.

CSA

The Cloud Security Alliance maintains the Security, Trust & Assurance Registry (STAR). STAR consists of three levels of assurance aligned with control objectives in the CSA Cloud Controls Matrix (CCM).

SOC 1, 2, 3

The American Institute of Certified Public Accountants (AICPA) has developed the Service Organization Controls (SOC) framework, a standard for controls that safeguard the confidentiality and privacy of information stored and processed in the cloud.

FIPS 140-2

The Federal Information Processing Standard Publication 140-2 is a U.S. government standard that defines minimum security requirements for cryptographic modules in information technology products.

ISO-IEC 27017

Code of practice designed for organizations to use as a reference for selecting cloud services information security controls when implementing a cloud computing information security management system based on ISO/IEC 27002.

NIST CSF and SP 800-171

The Cybersecurity Framework of the US National Institute of Standards and Technology consists of standards to manage cybersecurity-related risks. Its special publication 800-171 is about Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations.