Hornetsecurity
Cloud security provider for Microsoft 365, covering email security, backup, compliance, permission management and awareness training.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| NF EN ISO/IEC 27001:2023 | AFNOR | Europe certificate; downloadable from the Hornetsecurity certificates page. Certificate number and expiry not shown in page text. | — | — | Current |
| ISO/IEC 27001:2022 | TÜV NORD | International certificate; downloadable from the Hornetsecurity certificates page. | — | — | Current |
| SOC 2 Type 2 | Not published | Stated on the Hornetsecurity company page. | — | — | Current |
| ISO 9001:2015 | Not published | Quality management; stated on the company page. | — | — | Current |
| ISO 20000:2018 | Not published | IT service management; stated on the company page. | — | — | Current |
| ISO 50001:2018 | Not published | Energy management — not an information security standard. | — | — | Current |
| BSI / BSZ certification | German Federal Office for Information Security (BSI) | Stated on the company page. | — | — | Current |
| DIN EN 50600-2019 | Not published | Data centre facilities standard — not an information security management certification. | — | — | Current |
Compliance Frameworks
ISO/IEC 27001:2022
Full
Two certificates published with named bodies: AFNOR (NF EN ISO/IEC 27001:2023, Europe) and TÜV NORD (ISO/IEC 27001:2022, International).
SOC 2 Type 2
Partial
Stated on the company page; auditor and period not published.
ISO 9001:2015
Partial
Stated on the company page; certifying body not named.
GDPR 2016/679
Partial
EU-centric company-operated regional data centres; specific region list not enumerated.
Data Handling
Data Residency Regions
Company-operated regional data centres, EU-centric; specific regions not enumerated
Encryption at Rest
No
Encryption in Transit
No
Contact & Responsible Disclosure
- Responsible Disclosure View policy ↗
- Bug Bounty Platform Discretionary bounties, no third-party platform
Best auditor transparency in this group
Hornetsecurity is the **only vendor in this part of the library that names its certifying bodies** — AFNOR and TÜV NORD — and publishes both certificates for download.
Note that several of its listed standards (ISO 50001 energy management, DIN EN 50600 data centre facilities, ISO 20000 service management, ISO 9001 quality) are **not information security certifications** and should be read accordingly.
It publishes a security.txt, commits to triage within 14 days and remediation within 120 days. **No public evidence** of a security incident.
Copyright © 2026 SnapGRC