Commitment to Security

We protect your information with the highest standards

Our infrastructure and processes are designed to guarantee the security, privacy, and regulatory compliance of all your digital operations.

Google Cloud

Google Cloud Infrastructure

We operate on Google Cloud Platform infrastructure, a world leader in cloud services, implementing platform best practices.

Auto Scaling

Resources that automatically adapt to demand, ensuring optimal performance at all times.

High Availability

Distributed architecture with geographic redundancy ensuring 99.9% availability.

Advanced Protection

Data encryption in transit and at rest, next-generation firewalls, and 24/7 monitoring.

Continuous Maintenance

Automatic security updates and patches without service interruptions.

Google Cloud Platform

99.9% Availability SLA

Security Certifications

We comply with the most demanding security standards in the industry.

ISO 27001

Information security management system that establishes organizational controls to protect information assets.

ISO 27017

Cloud-specific security guidance extending ISO 27001 requirements to cloud environments.

ISO 27018

Personal data protection standard for cloud service providers handling personally identifiable information.

PCI DSS

Payment Card Industry Data Security Standard governing secure payment card information handling.

CIS Benchmarks

Center for Internet Security best practices and security configurations.

Legally Valid Electronic Signature

Our electronic signature solutions comply with the most demanding regulations in Colombia and the European Union.

ONAC - Colombia

Certification from the National Accreditation Body of Colombia that validates compliance with technical and legal requirements for electronic signatures in the country.

eIDAS - European Union

European regulation on electronic identification and trust services that provides cross-border legal validity across all EU countries.

Full Legal Validity

Electronic signatures made through Nexafirma have full legal validity in Colombia under Law 527 of 1999 and in the European Union under the eIDAS Regulation, being equivalent to traditional handwritten signatures.

Regulatory Compliance

Our platforms comply with financial and solidarity sector regulations.

Financial Superintendence of Colombia

Compliance with Colombian financial supervision regulations for handling sensitive data and information.

Supersolidaria

Adherence to circulars and requirements of the Superintendence of Solidarity Economy for the cooperative sector.

GDPR Principles

Application of European General Data Protection Regulation principles in personal information processing.

Have questions about our security?

Our team is available to answer any questions about our security and compliance practices.

Contact security team