Certifications

Quality, security and data protection

In an increasingly complex and regulated digital context, guaranteeing quality, security and data protection is not just a requirement but a strategic factor.

Certified technology

Reliability and trust come first

The certifications we have obtained attest to our ongoing commitment to meeting the highest international standards, offering customers reliable, secure and compliant solutions.

UNI EN ISO 9001:2015

We have adopted a Quality Management System certified to ISO 9001, confirming our constant commitment to high levels of efficiency, reliability and customer satisfaction.

The ISO 9001 certification attests that company processes are structured, monitored and continuously improved according to internationally recognised principles.
This approach allows us to:

  • Ensure the quality of the services and solutions offered
  • Optimise internal processes and operational organisation
  • Ensure consistency and control across all company activities
  • Respond effectively to the needs of customers and the market

ISO/IEC 27001:2022

We have adopted an Information Security Management System certified to ISO/IEC 27001, guaranteeing the protection, integrity and confidentiality of the data managed within our solutions and digital infrastructures.

The ISO/IEC 27001 certification attests the implementation of a structured system of controls, processes and security measures, designed to prevent, manage and mitigate information security risks.
This approach allows us to:

  • Protect data from unauthorised access, loss or alteration
  • Ensure business continuity and system resilience
  • Ensure compliance with regulatory requirements and international best practices
  • Manage IT risks proactively

ISO/IEC 27017

Nest Company has adopted security controls certified to ISO/IEC 27017, specific to the protection of information in cloud services, further strengthening its security management system.

This certification complements ISO/IEC 27001 with guidelines dedicated to cloud environments, defining responsibilities, controls and best practices for both the provider and the user of the services.
It allows us to:

  • Ensure secure data management in cloud environments
  • Clarify roles and responsibilities between provider and customer
  • Reduce risks related to configurations, access and resource sharing
  • Ensure high standards of data protection, availability and isolation

ISO/IEC 27018

Nest Company adopts controls compliant with ISO/IEC 27018, dedicated to the protection of personal data (PII) processed in public cloud environments, further strengthening its commitment to privacy and security.

This certification defines specific guidelines for cloud service providers processing personal data on behalf of customers, ensuring transparency, control and protection of sensitive information.
In particular, it allows us to:

  • Ensure the protection of personal data against unauthorised access and improper processing
  • Ensure transparency on how data is processed and managed
  • Strengthen customers’ control over their own data
  • Support compliance with privacy regulations (e.g. GDPR)

Italian National Cybersecurity Agency

ACN

The software developed by Nest Company complies with the requirements set by the Italian National Cybersecurity Agency (ACN), guaranteeing high standards of security, reliability and data protection.

The ACN qualification attests that the solutions meet strict criteria for cybersecurity, resilience and information management, making them suitable even for highly critical contexts such as the Public Administration. In particular, this compliance allows us to:

  • Ensure high levels of data protection and IT security
  • Ensure reliability and business continuity of digital services
  • Comply with national cybersecurity regulatory requirements
  • Offer solutions suitable for adoption in regulated and sensitive contexts

Through alignment with ACN standards, Nest Company strengthens its commitment to providing secure, compliant technologies designed to the highest information protection criteria.

Building value together

Bring your company into the world of certified data

Enable reliable processes, reduce operational risk and guarantee the quality of information along the entire value chain. Choose Nest Company’s technology.

Contact us

1. POLICY AND MANAGEMENT COMMITMENT

1.1 Policy Statement

The Management of The Nest Company Srl (TNC), aware of the strategic importance of quality and information security in the context of SMEs working with significantly larger enterprise clients, has implemented an appropriate Integrated Management System (IMS) aligned with the principles of ISO 9001:2015 and ISO/IEC 27001:2022 standards, extended to ISO/IEC 27017.

The management of chain of custody, authenticated digital declarations, and the digital product passport involves handling sensitive and critical data for our clients. TNC recognizes that client trust is based on the continuous demonstration of technical competence, regulatory compliance, and management maturity comparable to the highest industry standards.

1.2 Strategic Objectives

Quality Objectives

  • Deliver software and services that meet the specifications and contractual commitments agreed with clients.
  • Ensure that development projects meet traceability, authenticity, and data integrity requirements.
  • Enhance the professional skills of employees and collaborators.
  • Develop innovation initiatives while respecting security and compliance constraints.
  • Maintain a performance-based results evaluation system.

Information Security Objectives

  • Ensure confidentiality, integrity, availability, and resilience of information.
  • Ensure full awareness of managed information and evaluation of its criticality.
  • Guarantee secure access by preventing unauthorized processing.
  • Ensure secure collaboration with third parties.
  • Promote awareness of security-related issues.
  • Promptly detect anomalies and incidents.
  • Ensure authorized access to operational facilities.
  • Ensure compliance with legal and contractual requirements.
  • Detect abnormal events and vulnerabilities.
  • Ensure Business Continuity and Disaster Recovery.

1.3 Commitment of Top Management

  1. Provide adequate resources: Allocate human, technical, and financial resources for the IMS.
  2. Establish clear governance: Define roles, responsibilities, and reporting structures.
  3. Ensure competence: Guarantee continuous staff training.
  4. Promote a security culture: Integrate security into the company culture.
  5. Manage the supply chain: Ensure security standards are applied to suppliers as well.
  6. Monitor and review: Conduct annual reviews of performance and processes.
  7. Communicate the policy: Publish it on the website and communicate it internally.