--- title: "Trust Center" url: "https://pegamento.nl/en/trust-center/" lang: "en" type: "page" description: "Trust Center Everything about information security, data protection, and business continuity—and how we handle these issues. Consult with our CISO Trust is good. Proven certainty is better. At Pegamento, technology is all about people: customers who want excellent service, employees" last_modified: "2026-10-21T08:53:50+00:00" translations: nl: "https://pegamento.nl/trust-center/" --- # Trust Center # Trust Center Everything about information security, data protection, and business continuity—and how we handle these issues. [ Consult with our CISO ](https://pegamento.nl/en/contact-us/) ## Trust is good. Proven certainty is better. At Pegamento, technology is all about people: customers who want excellent service, employees who rely on their systems, and organizations for which accessibility, privacy, and security are essential. That’s why we consistently prioritize information security, data protection, and business continuity. We work according to recognized standards, undergo independent audits, and have clear agreements regarding our services. In this Trust Center, we show how we approach this: transparently, clearly, and with a focus on what it means for your organization. [ All About Privacy ](https://pegamento.nl/en/trust-center/privacy/) [ All About Business Continuity ](https://pegamento.nl/en/trust-center/continuity/) ![DNV ISO 9001](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_ISO_9001-ruvtng4efpreyy96q088nareb5wly9aaiw6cfthz3c.png) ![DNV SOC 2 Type II 2026](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_SOC_2_Type_II_2026-ruvtni02tdu11qe5mcqys6lf4i51d9j4zanyqoh8ha.png) ![DNV NEN 7510](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_NEN_7510-ruvtnh28mjspak7tkimv7siuwjrz5ye0v0ttx3gkx4.png) ![DNV ISO IEC 27001](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_ISO-IEC_27001-ruvtnh28nfdf46u0ddh8ors847w4ih0iizlz79jfc8.png) ![DNV ISAE 3402 Type II 2026](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_ISAE_3402_Type_II_2026-ruvtng4efprfzs4eft5v2njwbuttijvunkg8jgtq1m.png) ![DNV ISAE 3000 Type II 2026](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_ISAE_3000_Type_II_2026-ruvtnf6k8vq5o65rlar8i5sfqgygaus4bfsr26v47u.png) ![DNV DORA](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_DORA-ruvtnf6kb2nx7eu0vmxjr95cqybm3uqscoh85yqhbc.png) ![DNV BIO 2.0](https://pegamento.nl/wp-content/uploads/elementor/thumbs/DNV_BIO_2.0-ruvtne8q48mmvsve14ix6rdw5kg8w5n20jtqoorvhk.png) ![TUV MVO niveau 3](https://pegamento.nl/wp-content/uploads/elementor/thumbs/TUV_MVO_niveau_3-ruvtnixx07v9xs539jg4cs1s3biplclhja4svndsko.png) ![NIS2 Supply Chain High Badge](https://pegamento.nl/wp-content/uploads/elementor/thumbs/NIS2-Supply-Chain-High-Badge-rv67mygrpuahb3r8a6kfgbum9fzbcrhh92ubt10p9k.webp) ## Reliable customer contact starts with strong security. Every day, people entrust their data to organizations—whether by phone, email, chat, or other digital channels. That information deserves strong protection. At Pegamento, we understand how important this is—especially for organizations in healthcare, government, social services, and other sectors where sensitive data and accessibility go hand in hand. That’s why information security isn’t a standalone project, but an integral part of everything we develop, manage, and support. We take concrete measures and have our practices independently audited. That way, you don’t have to rely solely on our word. ### Proven security Our information security management system is certified to ISO 27001 and is audited annually by [DNV](https://www.dnv.nl/certificering/managementsystemen/). For clients in **the healthcare sector**, we comply with NEN 7510, and for **government clients**, we operate in accordance with the Government Information Security Baseline (BIO 2.0). In addition, we have achieved the NIS2 SC30 High assessment. Our control measures are also independently assessed through ISAE 3000 and ISAE 3402 reports, including a SOC 2 Type II audit. We would be happy to explain which statements and reports pertain to a specific service or period. **Certification and assurance: what’s the difference?** Certification confirms that a management system, within a specific scope, meets the requirements of a standard. An assurance report provides independent insight into specific control measures; in a Type II audit, the effectiveness of those measures over a specific period is also assessed. These two forms of assessment complement each other. Would you like to see for yourself what our findings are based on? You can request a summary of the relevant reports using [the form below](#opvragen). ![Team Pegamento-certificering](https://pegamento.nl/wp-content/uploads/elementor/thumbs/Team-Pegamento-certificering-ruxt6lou42t3mkg4oqyykq1t85nmhnog2s2tyeiu2e.webp) ![Uitreiking van certificaten met DNV en Pegamento](https://pegamento.nl/wp-content/uploads/2026/10/DNV-uitreiking-certificaten-e1792151192656.webp) ## How We Protect Your IT Environment Effective security consists of multiple layers: from the infrastructure to the employees who work with it. **Access Based on Need** Employees are granted access only to the systems and data they need for their work. Logins require multi-factor authentication (MFA), and we review access rights quarterly. **Encryption** Data is stored and transmitted in encrypted form. **Secure hosting** Our platforms run in ISO 27001-certified data centers in the Netherlands. We assess the security level of partners such as [Uniserver](https://pegamento.nl/en/uniserver-hybrid-cloud-solutions/) and [Sprinklr](https://pegamento.nl/en/sprinklr-customer-experience-platforms/) both initially and on a regular basis. For each solution, we clearly specify the applicable infrastructure and processing agreements. **Monitoring and Detection** We monitor our systems 24/7 for anomalous behavior and suspicious activities, with support from [Reqon](https://reqon.nl/https://reqon.nl/). **Patch and Vulnerability Management** We implement critical security updates within two days. Our environment is tested annually by an independent penetration tester. **Secure Development** For custom development—for example, in [Mendix](https://pegamento.nl/en/mendix-low-code-platform/)—we follow secure-by-design principles and conduct code reviews. ## People Make the Difference Technology alone is not enough. All our employees sign a confidentiality agreement and submit a certificate of good conduct (VOG). They complete mandatory annual security awareness training, including phishing simulations. This ensures that employees are aware of the risks and know how to handle information with care. ## Prepared for Incidents No organization can guarantee that an incident will never occur. The difference lies in preparation and how you respond. Pegamento has a documented incident response process, with clear roles and escalation lines. In the event of a security incident affecting your data, we will notify you without undue delay and no later than 48 hours, in accordance with our agreements. We work together on recovery and, afterward, investigate which improvements are necessary. Does your organization fall under NIS2 or DORA? We then provide support with relevant information for your own assessment and any reporting to regulators. Your specific legal reporting deadlines remain leading in this process. ## Vulnerability found? Have you discovered a potential vulnerability in one of our systems? Please report it responsibly via [iso@pegamento.nl](mailto:iso@pegamento.nl). We appreciate reports from security researchers and will ensure appropriate follow-up. ## What does this mean for you? - An ISO 27001-certified information security management system, supplemented by relevant standards and independent assurance. - Encryption, MFA, controlled access rights, and 24/7 monitoring. - Annual independent penetration tests and rapid deployment of critical security updates. - A defined incident response process and clear communication during incidents. - Trained and screened employees who handle information securely. ## Would you like to view a certificate? Would you like to view our ISO certificate or a summary of an assurance report? Our team would be happy to assist you. Get in touch! ## Partnerships ![KVK-Sprinklr-referentie](https://pegamento.nl/wp-content/uploads/2025/04/KVK-Sprinklr-Referentie.png) ![Kleuterschool Referentie Pegamento](https://pegamento.nl/wp-content/uploads/2025/04/Kindergarden-Referentie-Pegamento.png) ![Luisterlijn-referentie](https://pegamento.nl/wp-content/uploads/2025/04/Luisterlijn-referentie.png) ![GasUnie is klant bij Pegamento voor Phone System](https://pegamento.nl/wp-content/uploads/2025/07/GasUnie-Pegamento.webp)