Perimeter
Two-factor perimeter access, 24/7 CCTV with 90-day retention, anti-tailgate mantraps.
Trust
Security & compliance
Per-facility certification posture and physical security controls, with the scope statement for each standard listed below.
Information security
-
ISO/IEC 27001
ISO 27001:2022Issued by: Independent accredited registrar
Information security management system covering facility operations, access control, and incident response.
-
SOC 2 Type I
SOC 2 (Type I)Issued by: Independent CPA firm
Security, availability, and confidentiality controls for colocation and interconnection services.
-
SOC 2 Type II
SOC 2 (Type II)Issued by: Independent CPA firm
Annual attestation of operating effectiveness across security, availability, and confidentiality trust services criteria.
Business continuity
-
ISO/IEC 22301
ISO 22301:2019Issued by: Independent accredited registrar
Business continuity management for utility-fed and generator-backed facility operations.
Environmental
-
ISO/IEC 14001
ISO 14001:2015Issued by: Independent accredited registrar
Environmental management system governing PUE reporting and renewable energy sourcing.
Compliance
-
PCI DSS
PCI DSS v4.0Issued by: Qualified Security Assessor
Cardholder data environment segmentation for payment-processing tenants. Attestation of Compliance available on request.
-
HIPAA
HIPAA HITECHIssued by: Self-attested + BAA
Healthcare data protection. Business Associate Agreement available on request for covered entity tenants.
-
FedRAMP
FedRAMP ModerateIssued by: Third-Party Assessment Organization (3PAO)
US federal authorization at Moderate impact level for government workloads. Authorization letter available on request.
-
GDPR
GDPR (EU) 2016/679Issued by: Self-attested + DPA
EU data protection. Data Processing Agreement available on request for EU and UK facility tenants.
-
Singapore PDPA
PDPA (Singapore)Issued by: Self-attested
Singapore personal data protection for SIN-1 tenants. DPA available on request.
-
Australian IRAP
IRAPIssued by: ACSC-registered assessor
Australian Infosec Registered Assessors Program for SYD-1 government workloads.
-
Brazilian LGPD
LGPD (Brazil)Issued by: Self-attested
Brazilian general data protection law for GRU-1 tenants. DPA available on request.
Physical security
Biometric access
Dual-factor biometric (fingerprint + card) on every hall. Per-rack cabinet locks optional.
Chain of custody
Shipping/receiving with photo capture, signed chain-of-custody for every device moved.
Audit log
Per-visitor access logs available on request. SOC 2 attestation of access controls.
Certifications by facility
| Facility | ISO 27001:2022 | ISO 22301:2019 | ISO 14001:2015 | SOC 2 (Type I) | SOC 2 (Type II) | PCI DSS v4.0 | HIPAA HITECH | FedRAMP Moderate |
|---|---|---|---|---|---|---|---|---|
| Frankfurt FRA-1 | ● | — | ● | ● | — | ● | — | — |
| Amsterdam AMS-1 | ● | — | ● | — | ● | — | — | — |
| Ashburn IAD-1 | ● | — | — | — | ● | ● | ● | ● |
| Singapore SIN-1 | ● | ● | — | — | ● | — | — | — |
| Sydney SYD-1 | ● | ● | — | ● | — | — | — | — |
| São Paulo GRU-1 | ● | ● | — | — | — | — | — | — |
Scope statements summarize what each certification covers; certificate numbers are available on request.