With our cloud platform, we enable working with highly sensitive data from your building management system. The security of this data and systems is mandatory for our daily work. That is why our processes and systems in all areas of the company have been certified in accordance with DIN EN ISO 27001 since December 2023 and we have established redundant security mechanisms.
As a leading provider of software solutions for the optimization of technical building operations in Germany, we have successfully obtained certification in accordance with the information security standard DIN EN ISO/IEC 27001. The certification confirms that aedifion has established and implemented an effective management system for the protection of information in all areas of the company. This was verified by the INFAZ Institute for Auditing and Certification.
Our certificate proves the prudent handling of data and information in all areas of the company. In an elaborate auditing process, independent auditors examined the effectiveness and security of our information management.
ISO 27001 Certificate
Our software architecture ensures that your data is and remains protected at all times. In addition to our certified information security management, we also work with multi-level, redundant security mechanisms.
All communication between the building automation systems and the aedifion cloud platform is securely end-to-end encrypted. By employing state-of-the-art encryption technologies such as TLS (Transport Layer Security), we ensure that sensitive building data is protected at all times during transmission.
In the aedifion cloud platform, building automation data and systems is role-based via individual user profiles. Following the "principle of least privilege," modification and access rights are precisely restricted to the individuals who require them.
Hosting our cloud platform in Germany not only enables the rapid availability of real-time data, but also adheres to strict German and European data protection laws. Compliance with these laws ensures increased protection of personal data and creates a trustworthy basis for collaboration.
For the digital optimization of building operations, we rely exclusively on certified hardware and data centers in Germany and Europe. Certifications like DIN EN ISO/IEC 27001 ensure that the systems deployed on both ends meet the highest international standards, guaranteeing the reliable protection of all building data and systems.
The use of established standard protocols such as MQTT or HTTPS in communication between the building technology devices and the aedifion cloud platform not only facilitates the integration of various components, but also ensures robust data transmission with maximum security.
To ensure the integrity and availability of information assets, we regularly create backups of building data in geographically distributed data centers. This enables rapid recovery if necessary and guarantees the consistent reliability of our systems.
By deploying isolated environments for different functions within our building automation platform, we ensure that in the unlikely event of a sub-system being compromised, all sensitive data from the other systems cannot automatically be accessed, further increasing information security in the building.
In times of cybercrime and the ever-increasing value of data treasures, secure systems and processes are existential. That is why we are convinced that effective information security management should be a standard in data-processing organizations. We set these standards with our ISO 27001 certification. Our customers and partners can be confident that everything possible is being done to protect information and that strict security guidelines are being followed. This ensures that the risk and impact of data leaks and cyber attacks are minimized. In this way, we can enable long-term, reliable and secure collaboration.
CTO & Co-Founder
"If we don‘t allow fear to guide us but take a proactive approach, then we have already gained a lot.
We therefore recommend that owners and operators address the issue of IT security as early and proactively as possible."
