Encryption
Customer data is protected in transit using secure protocols and encrypted at rest where appropriate.
Security
How Stora protects your information
Our security programme combines platform engineering, secure development and information-security governance to protect the services operators rely on.
Access control
Access is based on least privilege, protected by multi-factor authentication on key systems and regularly reviewed.
Secure development
Production changes are tested, reviewed and approved through documented development and deployment processes.
Monitoring & response
Operational and security events are monitored, with defined processes for responding to and learning from incidents.
Resilience
Backups and documented recovery procedures help protect the availability of in-scope services and data.
Ongoing assurance
Risk, access and critical suppliers are reviewed through our continually improving Information Security Management System.
Certification scope
What the certification covers
Inside scope
The development, operation, maintenance and support of Stora’s cloud-based self-storage management and online booking software, associated websites, customer portals and related support services, encompassing the processing and protection of customer and end-user data.
Shared responsibility
Customer-operated facilities, local networks, access-control hardware and independently operated third-party services are not covered by Stora’s certification.