Certipost obtains SAS 70 Type II audit report

Certipost has successfully completed the SAS 70 Type II audit performed by independent auditor Ernst & Young. SAS 70, or Statement on Auditing Standard No. 70, is a widely recognised set of auditing standards for service organisations. The attestation validates that Certipost's security procedures meet stringent international requirements for information security.

“As our customers entrust highly sensitive information to us, we are strongly committed to providing them with solutions and services that ensure the highest level of security,” says Heiko Unterstab, former Security Officer and recently named Team Leader Solution Consultants at Certipost. “That is why we have developed, implemented and continue to maintain a process-oriented quality system that is the basis for all our security controls.” The quality system was initiated in 2004. Certipost has then extended its security controls to the full scope of its CertiONE platform for secure electronic document exchange.

In order to obtain an independent assessment of its internal controls, Certipost decided to prepare for a SAS70 Type I audit report, which was issued by Ernst&Young in February 2009. Building further on this achievement, Certipost has now obtained the SAS70 Type II report, which additionally covers the operating effectiveness of these controls over a period of six months. “SAS 70 compliance is an important tool in building a strong trust relationship with our customers,” says Heiko Unterstab. “The report gives them a detailed insight into the wide range of measures we have in place to minimise risks and ensure availability of our services”.

In its ongoing effort to offer its customers the best possible level of quality and reliability, Certipost commits itself to conducting SAS 70 audits on an annual basis.