Redstor
Cloud backup and recovery platform for MSPs, protecting servers, endpoints, Microsoft 365 and SaaS data with instant data recovery.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| ISO 27001 | Not stated by vendor | Self-asserted on the Redstor compliance page. No certifying body, scope, dates or certificate number published anywhere. | — | — | Current |
| ISO 9001 | Not stated by vendor | Self-asserted; no evidence trail published. | — | — | Current |
| ISO 22301 | Not stated by vendor | Self-asserted; no evidence trail published. | — | — | Current |
| SOC 2 Type 1 and Type 2 | Not stated by vendor | Self-asserted; no auditor, period or report access published. | — | — | Current |
Compliance Frameworks
ISO/IEC 27001:2022
Partial
Bare self-assertion — no certifying body, scope, dates or certificate number published.
SOC 2 Type 2
Partial
Self-asserted Type 1 and Type 2; no auditor or period published.
ISO 22301:2019
Partial
Self-asserted; no certificate detail.
GDPR 2016/679
Partial
Published DPA and BAA; no sub-processor list found.
Contact & Responsible Disclosure
- Security Contact [email protected]
- Responsible Disclosure View policy ↗
- Bug Bounty Platform Direct email, no third-party platform
Entity and evidence caveats
**Redstor now operates under the CyberSentriq brand** — its EULA, DPA, BAA and vulnerability disclosure documents are all titled CyberSentriq. Confirm the correct legal entity before contracting.
Its certification claims are a **bare self-assertion with no evidence trail**: no certifying body, scope, dates or certificate numbers for any of ISO 27001, ISO 9001, ISO 22301 or SOC 2. **No public evidence of Cyber Essentials** despite the UK base. Data residency is claimed but specific UK/EU regions are not enumerated.
**No public evidence** of a security incident.
Copyright © 2026 SnapGRC