Acronis implements Information Security Management System (ISMS) in accordance with the ISO/IEC 27001:2013 framework for information security, which has become an industry gold standard. Acronis has been certified by the independent third-party auditors of the British Standards Institution (BSI). Acronis is dedicated to continually improving its security posture by enhancing and maturing our ISMS based on latest best practices.

Additionally, Acronis has obtained two certifications which extend general ISO 27001 requirements to: Information security controls for cloud services (ISO 27017:2015); and Protection of personally identifiable information (PII) in cloud (ISO 27018:2019).

ISO 9001 is an international standard for quality management systems (QMSs). It is part of the ISO 9000 family of standards, addressing various quality management aspects. The ISO 9001 standard provides organizations with a framework to establish and maintain an effective quality management system, ensuring that their products or services consistently meet customers’ requirements and regulatory standards.

ISO 9001 emphasizes key principles such as leadership, employee engagement and evidence-based decision making. Being the most widely used quality management standard in the world, Acronis ISO 9001 certification demonstrates our robust commitment to quality and increasing partners' trust. This framework ensures both the consistency of core Acronis processes and services, but also positions us for continuous improvement and adaptability in an ever-evolving business landscape.

If you want to get our current SOC 2 report, please contact your account manager or support.

Acronis has successfully passed an independent audit against the Payment Card Industry (PCI) Data Security Standards (DSS). The Qualified Security Assessor has validated Acronis compliance with the PCI DSS 3.2.1 for Level 1 Service Provider.

The current scope of the attestation covers Acronis Cyber Protect Cloud operating in enhanced security mode in several data centers in U.S. and EMEA.

Cyber Essentials is a government-backed scheme that is applicable to organizations operating in the United Kingdom. It includes a set of basic technical controls which organizations have to implement to protect themselves against common online security threats.

Acronis successfully passed independent third-party audit and earned its Cyber Essentials Plus certificate. You can additionally check the certificate at https://registry.blockmarktech.com/certificates/fb673926-da87-4887-8501-d6d9c929c532/.

The Esquema Nacional de Seguridad (ENS) is a cybersecurity framework established by the Spanish government to ensure the protection of sensitive information and critical infrastructure within public administrations. It defines a set of security measures and guidelines that organizations must adhere to in order to mitigate cyberthreats and safeguard data. ENS certification is required for public administrations' suppliers to demonstrate their compliance with established security standards and ensure the integrity, confidentiality, availability, authenticity and traceability of information systems.

Acronis has successfully passed an independent third-party audit to achieve ENS certification for the High / Alta level of security, ensuring robust protection measures are in place. Compliance with ENS aligns with the objectives of the NIS 2 Directive, contributing to the overall cybersecurity resilience of Spain and the European Union.

The Cloud Italia qualification process, managed by ACN, Agenzia Cybersicurezza Nazionale (National Cybersecurity Agency), plays a vital role in ensuring the security and reliability of cloud services offered to Italy's public sector. Aligned with the NIS 2 Directive, it imposes stringent criteria on providers, including compliance with data protection regulations and cybersecurity standards. By meeting these requirements, providers contribute to the resilience of critical digital infrastructure and services. The qualification process fosters trust in cloud solutions, facilitating their adoption across government agencies and organizations.

Acronis, having successfully passed through the qualification process, is present in the Cloud Italia Marketplace, offering trusted cloud services. This not only modernizes public services, but also enhances digital transformation and cybersecurity cooperation at the European level, in line with broader E.U. directives and initiatives.

Acronis supports multiple services (or products). Individual Acronis service functions and HIPAA compliance status can vary depending on the service and data center used. Please speak with your account manager to clarify the compliance status of particular services and data centers.

There are several regulations that protect health information in Canada. As on the federal level, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to health care data, and the Personal Health Information Protection Act (PHIPA) is Ontario's health-specific privacy legislation that has established general principles for the collection, use and disclosure of personal health information (PHI).

PHIPA has no officially recognized certification or accreditation process; nevertheless, Acronis has assessed its data processing practices against PHIPA requirements. Note that using Acronis products in a PHIPA-compliant way is the shared responsibility of Acronis and its customers. Please read Acronis PHIPA white paper below to check the shared responsibilities model we use to ensure fulfillment of PHIPA obligations.

NEN 7510 is the official Dutch standard for setting up and implementing information security management systems for organizations working with patients’ data in the health care industry. The standard became mandatory for health care organizations in the Netherlands in 2018, offering further interpretation and accountability of the General Data Protection Regulation (GDPR).

NEN 7510 is based on ISO 27001:2013; however, it introduces three additional controls and some specific compliance measures that supplement the ISO standard. Acronis itself is not subject to NEN 7510, but by being ISO 27001 certified, we implement most of the applicable controls. Also, Acronis products can help Dutch health care organizations with their NEN 7510 compliance requirements.

Cloud Security Alliance (CSA) Security Trust, Assurance and Risk (STAR) is the industry’s most powerful program for security assurance in the cloud. Acronis is listed as a Trusted Cloud Provider since May 2020.

You can download the most up-to date self-assessment questionnaire for Acronis Cyber Protect Cloud directly from the CSA website.