Security & privacy - granitegrc.com

We take your security seriously

Granite takes information security and data protection into account in management, service production, product development and personnel activity. Granite takes extensive technical and organisational measures to ensure security and data protection. In addition, the Granite services and security policies are regularly audited by external experts.

Granite’s Information Security Management System is ISO 27001 certified. The data protection practices conform the European Union General data protection regulation (GDPR). As data centre service providers, we only make use of the most reliable, ISO 27001 certified operators.



Information security management system

Our information security management system (ISMS) encompasses Granite’s entire operations and service production. The ISMS is certified in accordance with the ISO/IEC 27001:2013 standard.

Data protection and data security in service production

Data protection and data security form the basis of our service production. We adhere to the principles of secure programming at every step of product development and ensure the implementation of data protection through various controlling methods.

Risk management policy

Our risk management policy concerns all the risks and opportunities related to our operations. Risk management ensures the development and continuity of long-term business goals.

Information security policy

One of the essential prerequisites for our business is smooth and functional information management. Information security policy supports the implementation of secure information management and ISO 27001 requirements at all company levels.

Business Continuity Plan

We are thoroughly prepared for and ready to manage any disruptions related to our business operations and service production. Granite’s business continuity plan describes the continuity principles on a practical level.

Marketing privacy policy

The purpose of our privacy policy is to inform the users of our website and services about the ways their personal information is being processed and protected.