generated: '2026-07-18'
method: searched
probe: false
source: https://www.canditech.io/trust-center/
url: https://www.canditech.io/trust-center/
certifications:
- ISO/IEC 27001:2013
- GDPR
- PCI DSS (via third-party certified billing processor)
programs:
- name: ISO/IEC 27001:2013 ISMS
  detail: Certified Information Security Management System.
- name: GDPR compliance
  detail: GDPR-compliant with a Data Processing Agreement (DPA) available to customers.
- name: AWS Advanced Technology Partner
  detail: Cloud infrastructure hosted on Amazon Web Services (EU region) with a disaster-recovery site.
- name: PCI DSS
  detail: Payment card data handled by a third-party PCI-DSS certified billing processor; no PCI data stored internally.
encryption:
  at_rest: AES-256
  in_transit: TLS 1.3 (minimum TLS 1.2)
  passwords: hashed and salted
practices:
- Annual third-party penetration testing
- Dedicated CISO and security team oversight
- EU-hosted infrastructure with disaster recovery
evidence:
- source: https://www.canditech.io/trust-center/
  keywords: [iso 27001, gdpr, aes-256, tls 1.3, penetration testing, pci-dss]