Certifications
4Science is the DSpace Provider with the highest number of privacy and security certifications because we want to reserve the best support level, without compromises, to the institutions that decide to work with us.
4Science is the only Certified Platinum Provider of DSpace that is Certified ISO 27001
4Science brings a high level of assurance to the services it provides
for its clients and partners, via the following key certifications
DSpace Certified Platinum Provider
DSpace Certified Platinum Providers are organizations that have demonstrated expertise and a significant community effort to support DSpace open technologies. 4Science is a Certified Platinum Provider for DSpace.
ISO 27001 Certification
This certification underscores our commitment to safeguarding sensitive data and maintaining robust security practices. 4Science adheres to the requirements set by the ISO 27001 standard. By achieving this certification, we provide our clients and partners with the assurance that their data is handled with the utmost care and security.
ISO 9001 Certification
4Science complies with the requirements of standard UNI EN ISO 9001:2015 to provide customers with high quality services. The process of continual improvement ensures efficiency, reduces errors and maintains a high standard of service delivery.
AWS Partner
4Science is registered in the APN (AWS Partner Network) with the data center based on the AWS cloud, as a Validated Partner with a qualified software solution. Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster. AWS has certification for compliance with ISO/IEC 27001:2013, 27017:2015, 27018:2019, ISO/IEC 9001:2015.
CSA Trusted Cloud Provider
The CSA Security Trust Assurance and Risk (STAR) Program encompasses key principles of transparency, rigorous auditing, and harmonization of standards. Companies who use STAR indicate best practices and validate the security posture of their cloud offerings. The STAR registry documents the security and privacy controls provided. This publicly accessible registry allows cloud customers to assess their security providers in order to make the best procurement decisions. 4Science is committed to such principles and published its self-assesment for DSpace(-CRIS/GLAM), Dataverse and OJS SaaS services in the registry.
ORCID Certified Service Provider
Certified Service Providers enable ORCID members to easily integrate ORCID into local workflows and systems and provide a more consistent user experience for researchers. DSpace-CRIS is fully integrated with ORCID in all its functions and was one of the first CRIS/RIMS products to receive this certification.
DataCite Registered Service Provider
A DataCite Registered Service Provider is an organization that has integrated with the DataCite APIs in order to allow existing DataCite Members to register DOIs using their own credentials. 4Science integrated DSpace, DSpace-CRIS, Dataverse and OJS to mint DataCite DOIs.
ISO/IEC 27017:2015
What it guarantees:
That the organization (provider or client) follows good security practices for cloud services.That specific measures are adopted to address the risks associated with the cloud environment, which are not always covered by ISO 27001 alone.That there is clarity on the roles and responsibilities between the cloud provider and the client.That data and applications hosted in the cloud are protected through specific technical and organizational controls.
ISO/IEC 27018:2019
What it guarantees
Customer personal data in the cloud is processed lawfully and securely.The rights of data subjects are respected (e.g., access, rectification, deletion).Data is not used for marketing or profiling without consent.There are transparent controls over who accesses the data, where it is stored, and how it is protected.The organization complies with the principles of privacy-by-design and by-default.