Scope4mation · How we work
Security & trust
You trust us with processes and data that matter to your organisation. That is why security, continuity and clear agreements are part of our work, from initial configuration to operations and handover.
View our certificationYour work needs to keep moving. That is our focus.
We work with you to understand the process, the data involved and who is responsible for what. Together we turn that into practical agreements for your organisation.
Care for your data
We agree who needs access, which data is processed and which parties are involved. Privacy and security are part of the design.
Focus on continuity
We agree on operations, maintenance, recovery and support. You know what to expect from us and what your own team handles.
Keep control of your processes
We make responsibilities and checks clear. We also discuss handover and future changes, so your organisation retains knowledge and informed choices.
We look at the whole chain.
For us, security extends beyond the platform. Access, logging, hosting and suppliers are part of the agreements for your environment. You get clarity on where data is processed and who is responsible for what.
Access that fits the work
We document roles and permissions and agree who handles exceptions.
Visibility into what happens
We configure feedback and, where needed, checks so your team can follow execution and exceptions.
Clarity about hosting
We explain the environment used, the suppliers involved and their responsibilities.
Our hosting partners and their certifications
Hosting and data centres: the underlying infrastructure matters too.
Our hosting is provided through TransIP (CloudVPS), supported by a data centre chain. Certifications apply to each supplier and its scope; they are not additional Scope4mation certifications.
| Party & role | Certification & assurance | Public source |
|---|---|---|
 TransIP Hosting provider · CloudVPS | ISO 27001:2022 · NEN 7510:2024 · ISO 9001:2015 | TransIP certifications |
 Eurofiber Cloud Infra Data centre provider | ISO 27001 · ISO 27017 · BIO 2.0 BBN2 · ISAE 3402 Type II · ISO 9001 · ISO 14001 · ISO 50001 | Eurofiber certifications |
 Global Switch Data centre provider | ISO 27001 · ISO 9001 · ISO 14001 · ISO 45001 · ISO 50001 | Global Switch certifications |
The applicable data centre, location and certificate scope depend on the environment used. We explain the supply chain and processing agreements as part of your review. Additional assurance reports may be requested under NDA and subject to supplier terms; fees may apply.
Request supporting evidence for your environmentPublic documents
Read the certificates and information security policy directly.
Agreements about your data
Processor agreements
Our own agreement or an industry model: review the documents and tailor processing details and annexes to your organisation. Years shown identify the available documents.
Scope4mationProcessor agreement · Dutch · version 1.9
Scope4mationProcessor agreement · English · version 1.9
Municipalities · VNGModel processor agreement
Healthcare industry associationsModel processor agreement · 2022
Zorgnet-IcuroModel processor agreement · 2018
Education & privacyDigital Educational Resources and Privacy Covenant
SURFModel processor agreement · 2019
Terms and contract agreements
Terms & contract agreements
For each engagement, we record the applicable terms and specific agreements.
General terms
Available for engagements where we expressly agree to these terms.
Municipalities · GIBIT 2025
For municipalities, we work on the basis of GIBIT 2025, with specific agreements about the engagement and services. The agreed contract terms govern; our general terms do not apply automatically.
Discuss contract agreementsIndependently certified
ISO/IEC 27001:2022/Amd 1:2024
Scope4mation B.V. is certified by TÜV NORD Nederland for the management system covering the development, installation and support of SaaS and on-premise data integration software. The certificate is valid from 19 June 2026 to 19 June 2029 and is evaluated annually.
The certification applies to Scope4mation B.V. and the stated scope. The documents show exactly what was assessed.
Alignment with your sector requirements
NEN 7510 and other frameworks: what does our foundation mean for you?
ISO 27001 is our certified foundation. We explain its relationship with additional frameworks for your supplier review, without presenting that as separate certification or full compliance.
Healthcare · NEN 7510
Scope4mation does not hold a separate NEN 7510 certificate. Our ISO 27001 measures for risk management, access, logging, suppliers and continuity provide a basis for healthcare organisations’ reviews. Healthcare-specific requirements and your process configuration require additional assessment.
TransIP lists its own NEN 7510 certification within its scope. This does not automatically certify Scope4mation or your complete process against NEN 7510.
Request information on NEN 7510 alignmentGovernment · BIO
We can explain the relationship between our ISMS, Statement of Applicability and your BIO questions. Your organisation’s process and supply-chain requirements remain leading. A data centre provider’s BIO statement applies only within its own scope.
Discuss your BIO reviewNIS2 & DORA
The Assurance Pack provides indicative alignment with topics such as governance, supplier management, incidents, logging and continuity. It supports due diligence; it is not a NIS2 or DORA certificate or a statement that your organisation meets every obligation.
Request mapping and supporting evidenceISAE, audits & technical testing
Scope4mation does not have its own separate ISAE 3000 or ISAE 3402 report. Our assurance foundation comprises ISO 27001, internal and external audits and periodic penetration tests. Supplier ISAE reports provide additional evidence for their own services. Test scope, dates and available statements are shared under controlled access.
View the route to supporting evidenceAdditional evidence: the Assurance Pack
Assurance Pack
We back up our commitments
A supplier review, audit or procurement process may require additional material. Request access; Scope4mation reviews the request and shares documents under controlled access.
Request Assurance PackFrom public information to supporting evidence
- ISO 27001, scope and audit information
- Technical security testing and penetration-test statement with scope and date
- Alignment with NEN 7510, BIO, NIS2 and DORA
- Privacy, processor and subprocessor agreements
- Hosting, data centre assurance and supply chain
- Continuity and reference to the SLA for operational agreements
- Exit and handover according to the agreed services
Browse publicly
Read the certificate, SoA, policy and public agreements directly, without an NDA.
Public documentsRequest access
Sign in or request an account. State your organisation and review purpose and complete the digital NDA.
Start your requestControlled sharing
After review and approval, access is provided through the portal. Additional supplier reports are arranged separately.
Discuss your information needsA question or something to report? Reach us directly.
We take your questions and concerns seriously. Use the appropriate route so we can follow up with care.
