Certifications & GDPR

Certifications and Compliance

At Maxxton, we prioritize trust, security, and compliance. Our commitment to adhering to industry-leading standards ensures the highest level of protection and transparency for our clients.

We are proud to hold certifications and/or comply with key regulations, including PCI-DSS, ISAE-3402 Type 1, GDPR, and NF525. These certifications and regulations demonstrate our dedication to secure data handling, financial integrity, and legal compliance across international standards.

On this page you will find the most recent certificates.

PCI-DSS

  • PCI-DSS-v4.0.1 - AOC - Maxxton 2024

  • PCI-DSS-v4.0 - AOC - Maxxton 2023

ISAE-3402 type I

  • ISAE-3402 - 2024-2025

  • ISAE-3402 - 2023-2024

NF525

  • NF525 certification 2024/2025 v1.3

  • NF525 certification 2023/2024 v1.2

French Regulation compliance (detailed information)

GDPR sub-processors

Organisation

Service scope

Maxxton India Technologies Pvt Ltd. (Pune, India)

Processing of data

Qualogy Consultancy BV (Rijswijk, the Netherlands)

Technical management of the oracle environment 

Google Cloud (Groningen, the Netherlands & Frankfurt, Germany)

Cloud solution provider

IT connections (Eindhoven, the Netherlands)

Entrance control solutions

Maxxton has concluded data processing agreements with the Sub-processors mentioned above or is contractually bound to any publicly available data processing agreement (e.g. Google Cloud).