ISO 27001 cloud provider: our ISO 9001 and ISO/IEC 27001 certifications
Rackone S.r.l. is an ISO 27001 cloud provider with two ISO certificates issued by WCS Ltd, an independent certification body: ISO 9001:2015 for quality and ISO/IEC 27001:2022 for information security, with the ISO/IEC 27017 and 27018 controls for cloud services and personal data. Both are valid until 30 March 2029 and can be downloaded from this page.
- 700+ active customers
- 24h support, every day
- GDPR data kept in Italy
In brief
Which ISO certifications does Rackone hold?
We build IT infrastructure for companies and the public sector on one clear principle: whoever trusts us with their data must be able to count on rigorous processes and security that can be proved, not promised.
That is why we undergo the ISO certifications most relevant to a cloud provider. Each certificate goes through a surveillance audit every year and a full review every three years, carried out by an independent body: not a goal reached once, but a commitment renewed over time, under external checks.
Both certificates are issued by WCS Ltd: ISO 9001 for service quality and ISO/IEC 27001 for information security. The second also includes the ISO/IEC 27017 controls for the cloud and the ISO/IEC 27018 controls for personal data, which are not separate certificates: they are verified in the same audit.
Quality management system
ISO 9001
The international standard for quality management systems: it certifies that company processes are defined, measured and continuously improved, with the customer at the centre.
For you: services delivered with traced, repeatable procedures and clear roles and responsibilities. The quality you experience does not depend on who answers: it is a system, checked by an external body.
Quality management system certified by WCS Ltd: certificate A.2026.0037/Q, standard ISO 9001:2015, issued on 24 March 2026 and valid until 30 March 2029. Download the ISO 9001 certificate (PDF, 224 KB)
Information security
ISO/IEC 27001
The international standard for information security management (ISMS): how to identify risks, apply the right controls and protect the confidentiality, integrity and availability of data.
For you: risk analysis, access control, encryption, incident management and regular audits. The other two standards rest on it: their controls sit inside this certificate.
Information security management system certified by WCS Ltd: certificate A.2026.0037/IS, standard ISO/IEC 27001:2022, issued on 24 March 2026 and valid until 30 March 2029. Download the ISO/IEC 27001 certificate (PDF, 226 KB)
Cloud controls, within the ISO/IEC 27001 certificate
ISO/IEC 27017
A code of practice, not a requirements standard: it extends ISO/IEC 27001 with controls designed for the cloud. It addresses the risks that exist only there and clarifies the shared responsibility model: what the provider protects and what stays with the customer.
For you: segregated virtual environments, isolated machines, hardened systems, secure data removal at the end of the service. You know where our responsibility ends and yours begins, with no grey areas.
Not a certificate in its own right: one of the two sets of additional controls declared as applied in certificate A.2026.0037/IS, edition ISO/IEC 27017:2015, verified in the same audit.
Personal data controls, within the ISO/IEC 27001 certificate
ISO/IEC 27018
An international code of practice, not a requirements standard: it protects personal data processed in the public cloud when the provider acts as a data processor, in line with the GDPR (EU Regulation 2016/679).
For you: transparency on the purposes of use, traceable access, limits on transfers and a ban on using customer data for unauthorised purposes: no profiling, no marketing on your data.
Not a certificate in its own right: one of the two sets of additional controls declared as applied in certificate A.2026.0037/IS, edition ISO/IEC 27018:2019, verified in the same audit.
How do you verify a Rackone ISO certificate?
An ISO certificate is verified on four details: the certificate number, the expiry date, the issuing body and the scope, meaning the activities it covers. These are Rackone's two certificates, as the PDFs show them.
The two certificates at a glance
| ISO 9001 | ISO/IEC 27001 | |
|---|---|---|
| Standard and edition | ISO 9001:2015 | ISO/IEC 27001:2022 |
| Certificate number | A.2026.0037/Q | A.2026.0037/IS |
| Certification body | WCS Worldwide Certification Standards Ltd | the same |
| First issue | 31 March 2023 | 31 March 2023, by another body |
| Current issue | 24 March 2026 | 24 March 2026 |
| Expiry | 30 March 2029 | 30 March 2029 |
| Additional controls | none | ISO/IEC 27017:2015 and ISO/IEC 27018:2019 |
| Scope | specialised hosting (website hosting, streaming services and application hosting, cloud services, server and cloud backup) and network application services | the same |
| Site | Via Calnova 119, Noventa di Piave (VE), Italy | the same |
| Document | PDF, 224 KB | PDF, 226 KB |
Four steps to check that a certificate is valid:
- Download the PDF from the table or from the standard's panel.
- Check number, standard and expiry: they must match the table.
- Compare the scope with the service you are buying: the certificate covers only the activities it lists.
- Check the status with the certification body: WCS Ltd states on the certificate that you can consult IAF CertSearch, the international database of accredited certificates, or write to the body.
Enterprise virtualisation
Proxmox Gold Partner
Gold is the highest level of Proxmox Server Solutions' reseller partners, reserved for those with the most experience and certified knowledge of its solutions. Rackone is Proxmox Gold Partner #1 in Italy.
For you: official subscriptions, direct escalation to the vendor when needed, and a partner that runs those clusters every day instead of just reselling them.
Official training
Proxmox Authorized Training Partner
The authorisation Proxmox Server Solutions gives to partners that deliver its official Proxmox VE training.
For you: the knowledge Proxmox recognises in its training partners is what our systems engineers apply to your clusters in production.
Data protection
Acronis Platinum Service Provider
Platinum is the highest of the four levels of the Acronis partner programme for service providers: Registered, Authorized, Gold and Platinum.
For you: the full Acronis Cyber Protect Cloud suite, the enhanced support Acronis reserves for Platinum and, if you want it, a remote copy of your cloud backup on our Edge network of data centers in Italy and Europe.
MePA and Assintel: qualifications and memberships
Rackone is qualified on MePA, the e-marketplace of the Italian public administration, and is a member of Assintel, the Italian association of digital companies (Confcommercio). Neither is a certification: one is a public procurement qualification, the other a membership, listed in the public list of Assintel members.
Verified by third parties
The partnerships in detail, in Italian
- ISO 9001
- ISO/IEC 27001, with the 27017 and 27018 controls
Frequently asked questions about Rackone's ISO certifications
Is Rackone ISO 27001 certified?
Yes, Rackone is certified to ISO/IEC 27001:2022. Certificate A.2026.0037/IS, from WCS Ltd, was issued on 24 March 2026 and is valid until 30 March 2029. It covers the information security management system for hosting, cloud services, server and cloud backup and network application services, at the Noventa di Piave site. The PDF can be downloaded from this page.
Are ISO/IEC 27017 and ISO/IEC 27018 separate certifications?
No, ISO/IEC 27017 and ISO/IEC 27018 are not separate certifications: they are codes of practice that extend a system certified to ISO/IEC 27001. In Rackone's certificate they appear as additional sets of controls applied, editions 27017:2015 and 27018:2019, verified by WCS Ltd in the same audit.
What does Rackone's ISO certification cover?
Rackone's ISO certification covers the scope written on the certificate: specialised hosting (website hosting, streaming and application hosting, cloud services, server and cloud backup) and network application services, at Via Calnova 119, Noventa di Piave. The scope is the same for both certificates: before citing it in a tender, compare it with the service you are buying.
How do you check that an ISO certificate is valid?
An ISO certificate is checked against its number, expiry, scope and issuing body, and by asking that body to confirm it. For Rackone's two certificates the body is WCS Ltd, which on the certificate itself refers to IAF CertSearch, the international database of accredited certificates, and to its own contacts. The table above gives the details to compare with the PDF.
Do Rackone's ISO certifications cover the data center?
No, Rackone's ISO 9001 and ISO/IEC 27001 certifications do not cover a building: they certify the company's management system for the activities in the scope. Standards that certify a data center as a facility, such as ISO/IEC 22237 or ANSI/TIA-942, are issued site by site to whoever operates it. The Edge network brings together our own data center in Venice and partner data centers in Italy and Europe, and its page lists the site certifications of the partner data centers.
How often are Rackone's ISO certifications renewed?
Rackone's ISO certifications are maintained with a surveillance audit every year and a full review every three years, carried out by WCS Ltd under ISO/IEC 17021-1. The current certificates were issued on 24 March 2026 and expire on 30 March 2029: at every renewal, the PDF on this page is replaced with the new one.
Can I use Rackone's certificates to qualify suppliers?
Yes, Rackone's ISO 9001 and ISO/IEC 27001 certificates can be attached to a supplier qualification: they help document supply chain security, one of the topics related to the NIS2 directive. Each PDF can be downloaded from this page, and for a more detailed supplier questionnaire a systems engineer will answer.
Can a company outside Italy use Rackone's certificates?
Yes, a company outside Italy can use Rackone's certificates as they are: ISO 9001 and ISO/IEC 27001 are international standards, and both WCS Ltd certificates are written in Italian and English, scope included. For any further document, ask our team in English or in Italian.
Certifications matter when someone uses them.
ISO 9001, ISO/IEC 27001, Proxmox Gold Partner, Acronis Platinum: behind each one are the people who use it every day, and who answer you in English or in Italian.
+39 0421 1885889 · [email protected]