At Kiwi Backup, security and compliance are at the heart of our commitments. With this in mind, regular audits play a central role in ensuring the effectiveness and continuous improvement of our practices, while maintaining our HDS and ISO 27001 certifications. A look back at the benefits of audits, our recent review by CertiTrust, and upcoming changes to the standards.

Why carry out regular audits?

Audits are much more than a mere formality. They provide several strategic benefits:

  • An outside perspective: Certified auditors, such as CertiTrust, offer an objective, expert view of our processes, identifying potential weaknesses and areas for improvement.
  • A lever for continuous improvement: Audit findings allow us to optimize our practices and anticipate future requirements, while strengthening the quality of our services.
  • A guarantee of trust: For our customers and partners, these regular audits demonstrate our professionalism and our commitment to meeting the highest security and compliance standards.

A look back at our October 2024 audit

In early October, CertiTrust carried out our surveillance audit for the HDS and ISO 27001 certifications. Here are the results:

  • Two minor non-conformities: Quickly identified, they concern administrative aspects with no impact on security. An action plan was submitted to and approved by the auditor, and its implementation is already under way.
  • About ten opportunities for improvement: These recommendations will guide our efforts to keep excelling. Several of them will be valuable assets for a smooth transition to the ISO 27001:2022 and HDS2 standards.

This audit confirms our ability to maintain high standards while remaining agile enough to evolve with new requirements.

Changes in the ISO 27001:2022 and HDS2 standards

These new versions of the standards, applicable from October 2025, introduce significant changes:

  • For ISO 27001:2022: Stronger controls related to risk management, including threat intelligence, supplier management for cloud services, and updated best practices in response to current threats.
  • For HDS2: Greater integration with GDPR requirements, emphasis on transparency in data processing, and stronger obligations for subcontractors.

These changes reflect the need to adapt to a constantly evolving digital environment, with growing expectations in terms of security and compliance.

Goal: renewal and anticipation

Kiwi Backup is actively preparing to incorporate these new requirements. We will apply for the renewal of our certifications in June 2025 in order to be fully compliant with the HDS2 and ISO 27001:2022 versions next October.

This proactive approach illustrates our commitment to our customers: offering them reliable, innovative backup solutions that comply with the most demanding standards.

Because data security is a never-ending task, we will continue to improve to live up to your trust.