Cyber Praxis
EN

Trust Center

Security and compliance at Cyber Praxis

We apply to our own systems the requirements we verify for our clients. This page brings together our certifications, our security measures, our subprocessors and the documents we share on request.

Updated on

Request a document Report a vulnerability

At a glance

  • ISO/IEC 27001:2022 certified

    Certification issued by SOCOTEC Certification International. Digital forensics is within the scope.

  • Court-appointed expert

    Registered in the national register of court experts of the Belgian FPS Justice under number EXP2018610.

  • Data protection

    Certified DPO, GDPR data processing agreement available, notification without undue delay in the event of an incident.

  • No cookies or trackers

    No audience measurement, no external scripts, automated security checks every week.

Certifications and frameworks

  • ISO/IEC 27001:2022

    Our information security management system is certified: risk assessment, statement of applicability, internal audits and management review. The scope covers digital forensics.

  • Expert witness work

    Recognition by the Belgian FPS Justice (EXP2018610): documented method, independence and chain of custody of evidence.

  • GDPR

    Our processing follows the GDPR and the Belgian law of 30 July 2018, under the oversight of a certified DPO. For your data, a data processing agreement sets out our commitments.

Security measures

These measures are part of our ISO/IEC 27001 certified management system.

Our organisation

  • Multi-factor authentication. Enabled on email, cloud services and all administrative access.
  • Encryption. Workstation disks and evidence media are encrypted.
  • Backups. Encrypted and tested regularly.
  • Restricted access. Case files are accessible only to the assignment team; every contributor, subcontractors included, signs a confidentiality undertaking.

Your assignment data

  • Chain of custody. Media and copies tracked, hash values computed at acquisition, every handling documented.
  • End of assignment. Return or destruction of media and copies, as agreed.
  • Artificial intelligence. The tools used during assignments do not reuse your data to train their models, and every finding is verified by an expert.
  • Incident. If it affects data entrusted to us, we inform you without undue delay, with what you need for your own notifications.

This website

  • Automated weekly check. Security headers, HTTPS certificate, page integrity, DNS and sensitive files: any anomaly raises an alert.
  • No cookies or trackers. No external scripts either; the contact form is sent without cookies.
  • Monitored dependencies. The tools that build the website are audited and updated automatically.
  • Security contact. Published in a security.txt file, following RFC 9116.

Subprocessors

The providers that process data to run this website and our exchanges with you. Details are in our privacy policy. Privacy and cookies

SubprocessorPurposeSafeguards
Cloudflare, Inc.Website hosting and protectionEU–US Data Privacy Framework and standard contractual clauses
HubSpot, Inc.Contact form and request trackingEU–US Data Privacy Framework and standard contractual clauses
Microsoft Ireland Operations LtdEmail (Microsoft 365)Entity established in the European Union (Ireland)

External contributors who take part in an assignment sign the same confidentiality undertaking as our team.

Documents

Some documents are public. The others are sent to you on request, sometimes under a non-disclosure agreement.

Report a vulnerability

Think you have found a weakness in this website or in one of our services? Write to info@cyberpraxis.eu, the contact listed in our security.txt file, describing the vulnerability, the address concerned and the steps to reproduce it.

We acknowledge and analyse every report. Please do not exploit the vulnerability beyond what is needed to demonstrate it, do not access third-party data, and give us time to fix it before any disclosure.

Frequently asked questions

Is Cyber Praxis ISO/IEC 27001 certified?

Yes, to the 2022 version of the standard, by SOCOTEC Certification International. Digital forensics is within the certified scope. A copy of the certificate is available on request.

Can you sign a GDPR data processing agreement?

Yes. When we process personal data on your behalf, a data processing agreement sets out our commitments. We can send you our template.

What happens to the data at the end of an assignment?

Media and copies are returned or destroyed, as agreed. While they are kept, they remain encrypted and accessible only to the assignment team.

Do you use artificial intelligence with our data?

Only as a support tool, within the scope of the assignment. The tools used do not reuse your data to train their models, and every finding is verified by an expert.

Updates

  • — Trust Center published.
  • — Automated weekly security check of the website introduced.