Information security
at ValueStreamer
ISO 27001 certified: how ValueStreamer protects your shop floor data
Introduction
Your shop floor data shows how your production really runs: KPIs, disruptions, countermeasures. That is knowledge worth protecting. We think so too.
You are probably wondering where your data is stored, who can access it and how we prove it. Fair questions. Here are our answers.
ISO/IEC 27001:2022 certification
ValueStreamer GmbH operates an information security management system certified by Proks Certification GmbH according to ISO/IEC 27001:2022. Certificate number: DE-IS-20260231.
- Scope: Development, sales and consulting for digital shop floor management using the software ValueStreamer
- Valid: 10 June 2026 to 9 June 2029, with annual surveillance audits
- How we work: We work mostly remotely. Our security therefore relies mainly on processes, access rights and secured devices, not on door locks.
Hosted on Microsoft Azure in the EU
The ValueStreamer platform runs on Microsoft Azure in data centres in the Netherlands (Azure region West Europe). Microsoft Azure is certified to ISO/IEC 27001, among other standards, and holds a BSI C5 attestation. Microsoft publishes current evidence in its Service Trust Portal.
This is how responsibilities are shared: Microsoft operates and secures the data centres. Our hosting partner Arborsys GmbH, based in Ulm, Germany, acts as managed service provider for server operations, updates and system administration. We are responsible for the application, access rights and our processes, governed by our certified ISMS.
Every customer receives a dedicated, technically separated instance with its own database. Your data never shares a database with other customers' data.
Security documentation for your supplier assessment
On request we provide our Statement of Applicability, data processing agreement (DPA), technical and organisational measures (TOMs) and answers to your security questionnaire.
Need more documentation?
Assessing us as a supplier? Tell us what your team needs. We will get back to you within 2 business days.
Frequently asked questions
Is ValueStreamer ISO 27001 certified?
Yes. ValueStreamer GmbH operates an information security management system certified by Proks Certification GmbH according to ISO/IEC 27001:2022. Certificate number: DE-IS-20260231, valid until 9 June 2029.
Where is our data stored?
On Microsoft Azure in data centres in the Netherlands (Azure region West Europe). Daily backups are also stored in the EU.
What data does ValueStreamer process?
Primarily data from your production and processes: KPIs, tasks, deviations, countermeasures and process confirmations. Personal data mainly consists of your users' master data (name, business email address, team and role) and the assignment of tasks and comments to people. For security purposes, we log technical access data such as logins and changes. You decide which content you capture through your configuration.
Is ValueStreamer GDPR compliant?
Yes. We sign a data processing agreement under Art. 28 GDPR with every customer. Our technical and organisational measures are available on request.
Microsoft is a US company. What does that mean for our data?
A fair question. Your data is stored in data centres in the EU and is encrypted in transit via TLS and at rest with AES-256. Data processing with Microsoft is covered by Standard Contractual Clauses and the EU Data Boundary. We are happy to walk your IT team or data protection officer through the details.
Who at ValueStreamer can access our data?
Only a small group of authorised people at ValueStreamer and our hosting partner, on a need-to-know basis. Administrative access is secured with two-factor authentication and VPN, and access and changes are logged.
What happens to our data when the contract ends?
You can export your data at any time during the contract term using the software's export function. We delete it no later than six months after the contract ends.
What availability does ValueStreamer guarantee?
We guarantee 99.5% availability per month. Critical incidents receive a response within two hours during our support hours (Mon to Fri, 9 am to 5 pm CET/CEST).
Does ValueStreamer support single sign-on?
Yes, via SAML 2.0 or OAuth 2.0 / OpenID Connect, for example with Microsoft Entra ID or Auth0. ValueStreamer also supports SCIM: users are automatically created, updated and deactivated from your identity provider, for instance when someone leaves your company. We test the setup on a separate test tenant first. How the setup works
Can I verify the ISO 27001 certificate?
Yes. The certificate is listed in the international database for accredited certifications: IAF CertSearch entry. You can also verify it via the QR code on the certificate or directly with Proks Certification at info@proks-cert.de.