Security Center
The security and confidentiality of your reports, designed in from the start
Security Certified at Every Level
Recognized certifications and independently audited practices protect your reports and evidence from day one
ISO 27001 Certified
Our information security management system is independently audited every year, ensuring rigorous controls across all of our internal processes.
Information Systems Assessed to CSA STAR Level One
Our information systems benefit from a CSA STAR Level One assessment, published on the Cloud Security Alliance’s STAR registry, an internationally recognized framework for evaluating the maturity of cloud security controls.
GDPR Compliant
Data minimization, a strictly defined purpose, and respect for data subject rights are built into every step of how a report is processed.
Sovereign SecNumCloud Hosting
Our hosting infrastructure is SecNumCloud-qualified and holds the Security Visa issued by ANSSI, shielded from any extraterritorial jurisdiction.
Regular Audits & Penetration Testing
Independent experts continuously challenge our platform through penetration testing to identify and fix vulnerabilities before they can be exploited.
An Architecture Built for Security and Compliance
From access governance to hosting, every layer of the platform is designed to protect your data and your whistleblowers.
Access Control and Governance
Access to sensitive cases and data is strictly controlled. Granular permissions, defined by role and by case, limit every user to what they strictly need, while strong authentication and complete traceability support your governance requirements.
- Granular permissions defined by role and by case
- SSO/SAML and multi-factor authentication (MFA)
- Immutable, timestamped audit log on every action
Infrastructure and Data Location
Our infrastructure is SecNumCloud-qualified and holds the Security Visa issued by ANSSI, shielded from any extraterritorial jurisdiction. Your reporting data stays hosted in France, with precise control over its location and systematic encryption, from report submission through to case closure.
- Sovereign SecNumCloud hosting, ANSSI Security Visa
- Data residency controlled in France
- End-to-end encryption of every exchange and document
Whistleblower Protection and Confidentiality
Protecting a reporter's identity relies on the technical architecture, not just an internal policy. No IP address or identifying metadata is collected, every exchange is encrypted, and every case stays siloed and accessible only to the people authorized to handle it.
- Anonymous reporting with no IP or metadata collection
- Encrypted two-way communication with the reporter
- Confidential, siloed handling of every case
API and Integrations
Connect Evidencia to your existing ecosystem with no heavy development. Native integrations cover your everyday business tools, a complete REST API lets you automate your own workflows, and SSO integration gives your teams smooth, secure access.
- Native integrations: Slack, Microsoft Teams, Salesforce, Notion...
- Complete REST API to automate your workflows
- Enterprise SSO (Okta, Azure AD)
Advanced Security Features
Flexible Hosting
Regional hosting options to meet your data location obligations.
End-to-End Encryption
Sensitive data is encrypted at rest and in transit.
Granular Access Controls
Role-based permissions ensure only authorized people can access a case.
Metadata Protection
No IP address or identifier is retained for anonymous reports.
Strong Authentication
SSO/SAML and multi-factor authentication available organization-wide.
Regular Audits
Independent penetration tests and audits continuously challenge our platform.
Frequently Asked Questions
Everything you need to know
Questions About Our Security?
Talk to our team to see how Evidencia meets your security and compliance requirements
