XWiki SAS is now ISO 27001 certified

In May 2026, XWiki SAS achieved ISO 27001 certification, an important milestone for how we manage information security across our services.

The certification covers the cloud hosting and support services we provide for XWiki and CryptPad.

ISO 27001 is an internationally recognized standard for information security management. In practical terms, it means that the way we identify risks, protect information, manage access, respond to incidents, and improve our internal processes has been independently assessed against a clear security framework.

For our customers, this provides added assurance that their data and services are supported by documented, regularly reviewed security practices.

The certification also reflects work that has been happening across the company for a long time. This includes stronger risk management, infrastructure monitoring, access controls, incident response procedures, employee training, business continuity planning, and regular security reviews.

XWiki Cloud is hosted in France on European infrastructure. Customers can also choose to deploy XWiki on premises or in a private cloud when they need greater control over infrastructure, data residency, or compliance.

Becoming ISO 27001 certified does not mean the work is finished. Security is an ongoing process, and the certification gives us a solid framework for continuing to review, improve, and strengthen the way we operate.

For XWiki SAS, this milestone supports a broader commitment to providing secure, open source collaboration tools while helping organizations keep control over their data, infrastructure, and long term technology choices.

<< Back to list