Compliance & certifications

Glesys maintains its security program in accordance with recognized standards and regulatory requirements. The program is built on the following frameworks:

ISO/IEC 27001

Glesys is certified under ISO/IEC 27001, which guides security controls, policies, and management practices. The Integrated Management System (IMS) is aligned with this standard and undergoes regular audits.

GDPR

Personal data is managed in compliance with the General Data Protection Regulation (EU 2016/679), with privacy incorporated into systems by design and by default.

Additional regulatory alignment

Glesys also monitors and aligns with:

• DORA (Digital Operational Resilience Act), applicable to financial and ICT service providers

• Other evolving standards and national requirements, such as NIS2 where relevant

Security practices are continuously adjusted to reflect changing requirements and conditions.