Certifications
DocBits is operated by Fellowpro AG under a comprehensive information-security, privacy and internal-controls program. The certifications below are independently audited each year; customers can download the official attestation reports directly from this page.
1. ISO/IEC 27001
This international standard defines the requirements for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). It helps organizations protect data in a systematic and cost-effective way, including processes for risk management and information security controls.
Impact for clients: Ensures that DocBits adheres to the highest standards of information security, providing confidence that sensitive data is well-protected.
Latest audit: Surveillance Audit SA1, 2025 — Fellowpro AG ISMS.
2. SOC 1 (Service Organization Control 1)
SOC 1 reports are designed for organizations that need to demonstrate the effectiveness of internal controls over financial reporting. It is particularly relevant for service providers that affect their clients’ financial reporting.
Relevance to DocBits: Demonstrates our commitment to maintaining stringent internal controls over financial data, providing assurance to clients about the reliability of our processes.
Latest audit: SOC 1 Type II — reporting period 2025.
3. SOC 2 (Service Organization Control 2)
SOC 2 focuses on a service organization’s controls relevant to security, availability, processing integrity, confidentiality, and privacy of data. It is crucial for technology and cloud computing companies that handle sensitive information.
Value for clients: Provides independent validation that DocBits has implemented effective controls to protect client data, ensuring trustworthiness in our software and services.
Latest audit: SOC 2 Type II — reporting period 2026.
4. GDPR (General Data Protection Regulation) Compliance
The GDPR is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas.
Client assurance: Compliance with GDPR ensures that DocBits processes personal data in line with EU regulations, protecting user privacy and adhering to strict data handling guidelines.
Latest audit: Independent GDPR Audit Report, 2025.
For additional documentation — DPA templates, sub-processor lists, penetration-test summaries or security questionnaires — reach out to compliance@fellowpro.com or your DocBits customer success contact.
Last updated
Was this helpful?