Certifications

4Science brings a high level of assurance to the services it provides for its clients and partners, via the following key certifications

ISO 9001:2015 Certification


4Science complies with the requirements of standard UNI EN ISO 9001:2015.

DSpace Certified Partner

DSpace Certified Partners are organizations that have demonstrated expertise and a significant community effort to support DSpace open technologies. 4Science is a Certified Partner and Service Provider for DSpace.

ORCID Certified Service Provider

Certified Service Providers enable ORCID members to easily integrate ORCID into local workflows and systems and provide a more consistent user experience for researchers when they encounter ORCID. Service Provider Certification is a means for ORCID to partner with SPs on their use of ORCID and to make product information more accessible to the ORCID community.

DataCite Registered Service Provider

A DataCite Registered Service Provider is an organization that has integrated with one of the DataCite APIs in order to allow existing DataCite Members to register DOIs using that Member’s own log-in credentials. A CRIS or a repository platform are both examples of a Service Provider. 4Science integrated DSpace, DSpace-CRIS, Dataverse and OJS to mint DataCite DOIs.

Service Provider on AWS

AWS has certification for compliance with ISO/IEC 27001:2013, 27017:2015, 27018:2019, and ISO/IEC 9001:2015.

 

4Science’s data center is based on the AWS cloud.

Below you can find the documentation related to qualifications for reliability and security compliance in the cloud, and treatment of data (GDPR compliance).

CSA-STAR CAIQ

4Science is a SaaS Solution Provider of the Cloud Security Alliance (CSA): https://cloudsecurityalliance.org/membership/current-solution-providers/.

The CSA Security Trust Assurance and Risk (STAR) Program encompasses key principles of transparency, rigorous auditing, and harmonization of standards. Companies who use STAR indicate best practices and validate the security posture of their cloud offerings.
The STAR registry documents the security and privacy controls provided. This publicly accessible registry allows cloud customers to assess their security providers in order to make the best procurement decisions.

4Science is committed to such principles and published its self-assesment for DSpace(-CRIS/GLAM), Dataverse and OJS SaaS services in the registry, available on this website (using the buttons below) and at the following link: https://cloudsecurityalliance.org/star/registry/4science-srl/.

AgID Qualification

4Science is qualified as a SaaS provider in the AgID Cloud Marketplace: https://cloud.italia.it/marketplace/search/results?searchKey=4science. The Agency for Digital Italy (AgID) is the technical agency of the Italian Govenment. Its main purpose  is to guarantee the achievement of the Italian digital agenda objectives and contribute to the diffusion of information and communication technologies, with the aim of fostering innovation and economic growth.

The qualification ensures that SaaS services for the Italian Public Administration Cloud are developed and delivered according to reliability and security criteria considered necessary for public digital services.

Data Management and Retention Policy

The Data Management and Retention Policy explains how 4Science manages customer-owned data during the contractual period.

Data Cancellation Policy

The data cancellation policies explain how 4Science deletes customer-owned data after the end of the contract period.