Since 2003, KiwiBackup has been helping you back up your sensitive data and, since 2018, your health data.
In line with changing regulations on the hosting and managed services of health data, KiwiBackup has undertaken an HDS certification process that includes compliance with the ISO 27001 standard.
Management letter of commitment
In order to support our customers' ever-increasing security requirements and to ensure the long-term future of the KiwiSanté and KiwiCloud solutions, KiwiBackup has been engaged since 2019 in a process of obtaining and renewing HDS certification and the ISO 27001 standard for information security management.
As a result, our KiwiSanté solution, intended for healthcare professionals, and our KiwiCloud solution, intended for professionals outside the healthcare sector, were certified HDS in 2019 for KiwiSanté and ISO 27001 for KiwiCloud, respectively.
This long-term approach is fully in line with our values of trust, professionalism, innovation and dynamism. With this in mind, our main objective is to ensure the sustainable development of KiwiBackup, while implementing the highest security conditions for processes and data and ensuring the quality of the solution.
HDS and ISO 27001 certifications are particularly demanding, all the more so for small IT services companies like KiwiBackup. Nevertheless, they are essential in a market like ours, as our customers entrust us with some of their most valuable assets: their sensitive data and health data. We are committed to meeting their legitimate demand for security through this certification process.
To this end, an information security management system (ISMS) was set up during the first half of 2019. It includes high-level policies setting out KiwiBackup's requirements for all its processes and its relationships with its environment (customers, suppliers, employees, legislators…), as well as detailed procedures for every action involving security. A service management system (SMS) has also been initiated in order to place data security and service continuity at the heart of our developments.
To support and inform this approach, a risk analysis has been carried out based on the EBIOS methodology of the ANSSI (French National Cybersecurity Agency). This analysis makes it possible to identify the most critical threats and to put in place the necessary actions, which are regularly reviewed by the security committee.
The men and women who make up KiwiBackup are its greatest asset, through their skills and know-how; all of them are committed to this process and play an active role in security every day, at every level. A continuous security awareness program for employees and regular training for certain key staff, in particular system administrators and CISOs, have been put in place. Everyone's involvement is essential, and I thank all the staff for their support since the start of the project and for their future contributions.
HDS and ISO 27001 certifications are in themselves a key step, but they represent only one milestone in the process implemented in the company. Annual audits allow us to make sure that our continuous improvement approach and the day-to-day follow-up of our action plans properly address the issues at stake: securing processes and data, meeting our customers' security requirements and complying with the regulations in force in our sector.
I personally undertake to ensure that all the provisions of KiwiBackup's ISMS and SMS are applied and respected, and to provide the KiwiBackup teams with the resources needed to do so.
Mulhouse, September 10, 2019 – Updated October 14, 2025
Sébastien HEITZMANN
Managing Director and CTO, KiwiBackup
Our team remains at your disposal for any further information.