Skip to content
Menu
Swedish foundation / Our commitment

Trust must endure.
All the way.

Know where your systems are and who is responsible for operations. Our own infrastructure is located in data centres in Stockholm, with racks in private, locked areas. You receive evidence to follow up on service delivery.

Discuss responsibilities and evidence See what you can review
Three interlinked forms in granite, glass and metal on a shared granite foundation: Complior's chain of trust.
Infrastructure, data protection and identity on a shared foundation. Concept illustration.
The foundation in practice

Different requirements.
Concrete solutions.

A payment platform and a signing service have different needs. The case studies show how Swedish infrastructure and separate key control are used in practice.

Case study / Payments

Travel Clearing

A payment platform with many connections.

Travel Clearing needed a hosting partner that understood payment security and connections to other parties. Complior supported implementation where several external partners and systems needed to work together.

”Complior stands out as a security-conscious and knowledgeable partner with good communication and clear follow-up.”

Andreas Brase, CEO of Travel Clearing · Case study 2024
Read about Travel Clearing
Case study / Key control

Scrive

Cloud in AWS. Root keys at Complior.

Scrive combines AWS with external key management at Complior. KMS and HSM give root keys a separate location, with key operations through AWS External Key Store.

Read about Scrive
Evidence for your decision

Review the foundation.
Review the service.

Review certificate scope, see who does what in the responsibility matrix and follow the work in your environment through control documentation.

  1. PCI DSS Level 1 and three ISO standards

    Complior is assessed against PCI DSS v4.0.1 at Service Provider Level 1. Its management systems cover ISO 27001, ISO 9001 and ISO 14001. Request current certificates and the AOC to assess scope and validity before making your decision.

    Certification information

  2. The work behind the reports

    Quarterly evidence under the Compliance managed operations service includes critical system updates, vulnerability findings, network diagrams and firewall rule reviews.

    View controls and reporting

  3. Our published policies

    Read how Complior describes its handling of personal data, website cookies and environmental work.

    Read our policies
Clear responsibilities

Who does what?
From requirements to everyday practice.

See what we take responsibility for, which decisions you retain and what we plan together.

Complior

  • Provides its own infrastructure and delivers your managed operations service.
  • Carries out the associated controls and prepares supporting records.

You

  • Define business requirements and prioritise the most important systems and data.
  • Decide how information is used, who has access and which controls you need to carry out yourselves.

Together

  • Define the scope of systems, integrations and application responsibilities.
  • Agree contact channels, follow-up and what needs to be demonstrated during an assessment.
Set out in a responsibility matrix.

Every system and control needs a responsible party. The matrix connects Complior's commitments with the tasks and decisions you retain.

From requirements to controls
Next steps

What do you need to
demonstrate?

Start with your requirements for security, responsibility and follow-up. We take the discussion forward with the right specialists.

Discuss your assessment requirements