Keepit trust center

Keepit helps ensure GDPR compliance by providing strong data protection against ransomware and supporting the implementation of essential regulatory workflows. Keepit fully implements GDPR's Article 17 and Article 32, making Keepit an essential tool for your GDPR compliance efforts. 

To learn more read the Keepit for GDPR compliance whitepaper. 

The Health Insurance Portability and Accountability Act (HIPAA) mandates that related documents must be retained for a minimum of six years from their creation, or, in the case of policies, from their last effective date. These retention requirements often surpass the default capabilities provided by SaaS applications. Keepit, however, offers up to 99 years of customizable retention options.  

To learn more read Keepit for HIPAA compliance.  

Keepit facilitates compliance with the EU directive on protecting digital infrastructure, sensitive business information, and personal data. Ensuring cyber resiliency requires storing backups separately from primary data in an independent cloud infrastructure. This approach ensures compliance and business continuity, providing 24/7 data accessibility and robust recovery capabilities, which are key features of Keepit's backup and recovery service. 

Learn more about Keepit for NIS2 compliance. 

Keepit holds ISO 27001 certification and an independent SOC 2 Type II audit report. Additionally, Keepit has successfully obtained industry-recognized certifications such as TISAX, TX-RAMP and EcoVadis, with more certifications planned.

All of Keepit's data centers conform to a high physical security baseline and hold ISO 27001 certification, supplemented by additional security standards. e.g. SOC-2, PCI/DSS, HIPAA, and NIST. 

Your backup data will be stored exclusively within the Keepit data center location of your choosing.

To support data sovereignty requirements, customer data is stored within Keepit’s selected regional data locations in the Americas, Europe, or Asia-Pacific. Each region operates independently and is geographically isolated from the others, while leveraging an active-active architecture across multiple data centres within the region. This provides high availability, resilience, and redundancy, while ensuring that customer data remains within the chosen geographic region.

See a full list of Keepit’s data centers and locations.