Certification

Certification in IT business is presently a must-have proof of quality. This is why we underwent the required procedures to prove the quality of our Quality Management and Data Management Systems.

ISO 9001:2015 - Quality Management Systems (QMS) - Learn More
ISO 9001 sets out the criteria for a quality management system within an enterprise, that is based on a number of quality control principles. This certification helps ensure that customers get consistent, high quality products and services, thus increasing customer satisfaction and experience. Our quality management systems are validated by an independent third party certification authority, the aim being to provide a solid scalable framework for managing our business.
The QMS refers to key areas within an organization, including the product development processes and the very units that create a product, such as Product Management, Project Management, Development, QA; departments that run a company, such as Company Management, HR, Health & Safety, Corporate Control and Supervision; as well as client-related units, such as Sales, Marketing, Service Delivery, Support and Maintenance. By managing these areas using a prescriptive framework like ISO 9001 we are able to manage and control the efficiency of our operation, creating a proactive repeatable set of processes that allow safe high quality services to be provided consistently and quickly.

The pCloud Quality Management System is centrally managed in Switzerland by the parent company.

Scope:
Product Development processes, including: Product Management, Project Management, Development, QA, Sales, Marketing, Service Delivery, Support and Maintenance. Company Management, HR, Health & Safety, Corporate Control and Supervision.

The in-scope applications, systems and processes covered by the pCloud Quality Management System are:

• pCloud Software Client (Desktop / Laptop Access)
• pCloud Web Application (Desktop, Mobile and Smart Devices Browser Access)
• pCloud Mobile Application (Mobile Device Access)
• pCloud Application Programming Interface (API)

ISO 27001:2013 - Information Security Management Systems (ISMS) - Learn More
ISO 27001:2013 is the leading and most updated information security management standard around the world. Most importantly, it takes into account the fast transforming area of information security and technology. To deal with any possible issues, related to information security and cybercrimes prevention, any software provider needs to apply high-end standardization, such as ISO 27001. The basic objective of the ISO 27001 standard is to help establish and maintain an effective information security management system that has a defined continual improvement approach to ensure it can grow and change along with the business and the technologies used.

The pCloud Information Security Management System is centrally managed in Switzerland by the parent company.

Scope:
Monitoring, management and security of Company’s Internal Data Bases and Users' Data. Provision, development, implementation and operation of hosting services and cloud services, rendered in the subsidiary of the company ("pCloud Ltd.") from the following address: No 13, 8 Dekemvri Str., Sofia, Bulgaria.

The in-scope applications, systems and processes covered by the pCloud Information Security Management System are:

• pCloud Software Client (Desktop / Laptop Access)
• pCloud Web Application (Desktop, Mobile and Smart Devices Browser Access)
• pCloud Mobile Application (Mobile Device Access)
• pCloud Application Programming Interface (API)

Data Centers
pCloud hosts user data through a leading certified data center via collocation. When using the pCloud service, user data is transferred to our outsourced servers via TLS/SSL protocol and is copied on at least three server locations in highly secure certified data centers either in the U.S. (Dallas, Texas) or in Europe (Luxembourg) - depending on the data region of your account. Our collocated service provider is certified for SSAE 16 SOC 2, Type II that ensures the highest level of security.

Our data centers are chosen following intense risk assessment processes that have proven the quality and reliability of our service provider. This includes selecting of the highest level of physical and technical security application, to ensure full data security compliance.