> For the complete documentation index, see [llms.txt](https://docs.docbits.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docbits.com/overview-and-basics/architecture/certifications.md). # Certifications DocBits is operated by **Fellowpro AG** under a comprehensive information-security, privacy and internal-controls program. The certifications below are independently audited each year; customers can download the official attestation reports directly from this page. {% hint style="info" %} Need a certificate for your procurement, security or compliance team? Every report on this page is the signed auditor deliverable — no NDA required. For questions about scope, controls or upcoming audits, contact ****. {% endhint %} ## 1. ISO/IEC 27001
This international standard defines the requirements for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). It helps organizations protect data in a systematic and cost-effective way, including processes for risk management and information security controls. **Impact for clients:** Ensures that DocBits adheres to the highest standards of information security, providing confidence that sensitive data is well-protected. **Latest audit:** Surveillance Audit SA1, 2025 — Fellowpro AG ISMS. {% file src="/files/dEdHwRCVdDqCP8gyNZBc" %} ## 2. SOC 1 (Service Organization Control 1)
SOC 1 reports are designed for organizations that need to demonstrate the effectiveness of internal controls over financial reporting. It is particularly relevant for service providers that affect their clients’ financial reporting. **Relevance to DocBits:** Demonstrates our commitment to maintaining stringent internal controls over financial data, providing assurance to clients about the reliability of our processes. **Latest audit:** SOC 1 Type II — reporting period 2025. {% file src="/files/Vgy5RueuluamSoiYqkH8" %} ## 3. SOC 2 (Service Organization Control 2)
SOC 2 focuses on a service organization’s controls relevant to security, availability, processing integrity, confidentiality, and privacy of data. It is crucial for technology and cloud computing companies that handle sensitive information. **Value for clients:** Provides independent validation that DocBits has implemented effective controls to protect client data, ensuring trustworthiness in our software and services. **Latest audit:** SOC 2 Type II — reporting period 2026. {% file src="/files/1d9di4errLBW6fuxcONk" %} ## 4. GDPR (General Data Protection Regulation) Compliance
The GDPR is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas. **Client assurance:** Compliance with GDPR ensures that DocBits processes personal data in line with EU regulations, protecting user privacy and adhering to strict data handling guidelines. **Latest audit:** Independent GDPR Audit Report, 2025. {% file src="/files/kysjZV2RPcaKVvnECHL7" %} *** For additional documentation — DPA templates, sub-processor lists, penetration-test summaries or security questionnaires — reach out to **** or your DocBits customer success contact. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.docbits.com/overview-and-basics/architecture/certifications.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.