Compliance — Acronis Trust Center

Acronis Trust Center

Commitment to compliance

To ensure that customers can trust our commitment to secure, private, professional product development, Acronis is constantly pursuing confirmation by independent third-party audits on our internal processes and extending the list of our certifications.

Dedicated to serving the US government

At Acronis SCS, the US government is our number one priority. As such, we have developed and certified our products to the highest levels of security possible to ensure data security across all Federal computing environments. With DoDIN APL, Common Criteria, and FIPS 140-2 certifications and compliance coupled with 100% US-based support, Acronis SCS provides Federal entities the tested and trusted solutions they need to preserve secure operational assurance and timely decision-making in the environments where it matters most. Learn more about Acronis SCS security practices.

DoDIN APL

The Department of Defense Information Network Approved Products List (DoDIN APL) serves as the single list of solutions authorized for use within DoD networks. The purpose of the list is to ensure every piece of equipment or software deployed within DoD’s network infrastructure is up to the task, both in terms of cybersecurity and interoperability. In passing DoD’s rigorous testing and evaluation process and earning this certification Acronis SCS Cyber Backup Hardened Edition proves itself to be a trusted solution for use across the Defense Department, other federal agencies, and public utilities. The certification includes requirements for cryptography, information assurance, CAC/PKI, IPv6, and UCR, as well as CS, SAR, and IO testing. Learn more about the DoDIN APL certification.

* Certified in April 2020

DoDIN APL certification PDF, 0.2 MB

Common Criteria

The Common Criteria certification verifies that the Acronis SCS Cyber Backup 12.5 Hardened Edition follows the standards developed by NIAP, managed by NSA, and accepted by more than 30 countries. This certification ensures the product’s specification, implementation, and evaluation processes were developed in a thorough and comprehensive manner. This encompasses everything from cryptographic support, user data protection, security management, protection of the TSF to privacy and trusted paths/channels. Learn more about the Common Criteria certification.

* Certified under server and agent protection profiles in August 2020

FIPS 140-2

The Federal Information Processing Standard (FIPS) 140-2 validation verifies that the cryptographic module utilized in both Acronis SCS Cyber Backup 12.5 Hardened Edition and Acronis SCS Cyber Protect Cloud have gone through rigorous testing and meets extensive requirements for military-grade encryption. This includes approved algorithms and cryptographic module specifications to protect the US federal government’s sensitive data. Maximum entropy is obtained with random number and key generation and before launch was reviewed and tested by government labs. Learn more about the FIPS certification.

* Acronis SCS Cryptographic Module FIPS 140-2 validated in December 2020

Cyber Security Maturity Model Certification 2.0 (CMMC)

The Cybersecurity Maturity Model Certification 2.0 (CMMC) is a unified standard for implementing cybersecurity across the US Department of Defense (DoD) software supply chain. Compliance demonstrates that an organization has established effective cybersecurity practices necessary to safeguard sensitive information such as Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) against cyberthreats.

Acronis SCS, Inc. has completed its Self-Attestation for CMMC 2.0 Level 1 compliance and obtained a Letter of Affirmation from a Certified Third-Party Assessor Organization (C3PAO) validating the compliance with CMMC 2.0 Level 1. By undergoing an independent assessment, Acronis SCS has gone the extra mile in ensuring compliance with CMMC 2.0 and providing its clients with the utmost conﬁdence in the ability to safeguard the sensitive information shared and entrusted to the company.