> Source: https://complior.se/en/trust/

Swedish foundation / Our commitment 

# Trust must endure. 
All the way. 

Know where your systems are and who is responsible for operations. Our own infrastructure is located in data centres in Stockholm, with racks in private, locked areas. You receive evidence to follow up on service delivery. 

[Discuss responsibilities and evidence →](https://complior.se/en/contact/) [See what you can review ↓](https://complior.se/en/trust/#tr-evidence) 

Infrastructure, data protection and identity on a shared foundation. Concept illustration. 

The foundation in practice 

## Different requirements. 
Concrete solutions. 

A payment platform and a signing service have different needs. The case studies show how Swedish infrastructure and separate key control are used in practice. 

Case study / Payments 

### Travel Clearing 

#### A payment platform with many connections. 

Travel Clearing needed a hosting partner that understood payment security and connections to other parties. Complior supported implementation where several external partners and systems needed to work together. 

”Complior stands out as a security-conscious and knowledgeable partner with good communication and clear follow-up.” 
Andreas Brase, CEO of Travel Clearing · Case study 2024 [Read about Travel Clearing →](https://complior.se/en/kundcase-travel-clearing/) 

Case study / Key control 

### Scrive 

#### Cloud in AWS. Root keys at Complior. 

Scrive combines AWS with external key management at Complior. KMS and HSM give root keys a separate location, with key operations through AWS External Key Store. 
[Read about Scrive →](https://complior.se/en/fallstudie/) 

Evidence for your decision 

## Review the foundation. 
Review the service. 

Review certificate scope, see who does what in the responsibility matrix and follow the work in your environment through control documentation. 

- 01 

### PCI DSS Level 1 and three ISO standards 

Complior is assessed against PCI DSS v4.0.1 at Service Provider Level 1. Its management systems cover ISO 27001, ISO 9001 and ISO 14001. Request current certificates and the AOC to assess scope and validity before making your decision. 
[Certification information →](https://complior.se/en/about-us/#ab-certifications) 

- 02 

### The work behind the reports 

Quarterly evidence under the Compliance managed operations service includes critical system updates, vulnerability findings, network diagrams and firewall rule reviews. 
[View controls and reporting →](https://complior.se/en/compliant-cloud/#cc-assurance) 

- 03 

### Our published policies 

Read how Complior describes its handling of personal data, website cookies and environmental work. 
[Read our policies →](https://complior.se/en/trust/policies/) 

Clear responsibilities 

## Who does what? 
From requirements to everyday practice. 

See what we take responsibility for, which decisions you retain and what we plan together. 

### Complior 

- Provides its own infrastructure and delivers your managed operations service. 

- Carries out the associated controls and prepares supporting records. 

### You 

- Define business requirements and prioritise the most important systems and data. 

- Decide how information is used, who has access and which controls you need to carry out yourselves. 

### Together 

- Define the scope of systems, integrations and application responsibilities. 

- Agree contact channels, follow-up and what needs to be demonstrated during an assessment. 

Set out in a responsibility matrix. 

Every system and control needs a responsible party. The matrix connects Complior's commitments with the tasks and decisions you retain. 
[From requirements to controls →](https://complior.se/en/compliance/) 

Next steps 

## What do you need to 
demonstrate? 

Start with your requirements for security, responsibility and follow-up. We take the discussion forward with the right specialists. 

[Discuss your assessment requirements →](https://complior.se/en/contact/)