HARCH|CORP
Compliance
Comprehensive compliance management for sovereign infrastructure with automated monitoring and reporting.
Certifications
Internationally recognized certifications validating our commitment to security, privacy, and operational excellence.
Soc2 Full Name
SOC 2 Type II attestation demonstrating robust controls for security, availability, and confidentiality.
Scope
Soc2 Scope
Region
Global Region
Last Audit
Pending
Iso27001 Full Name
ISO 27001 certification for information security management systems across all operations.
Scope
Iso27001 Scope
Region
Global Region
Last Audit
Pending
Iso22301 Full Name
ISO 22301 certification for business continuity management systems ensuring operational resilience.
Scope
Iso22301 Scope
Region
Global Region
Last Audit
Pending
General Data Protection Regulation
Full compliance with the General Data Protection Regulation for European data protection standards.
Scope
Gdpr Scope
Region
EU Region
Last Audit
Ongoing
California Consumer Privacy Act
Full compliance with the California Consumer Privacy Act, ensuring consumer data rights and transparency.
Scope
Ccpa Scope
Region
US Region
Last Audit
Ongoing
Moroccan Dpa Full Name
Compliance with Moroccan data protection authority (CNDP) regulations for sovereign data residency.
Scope
Moroccan Dpa Scope
Region
Morocco Region
Auditor
Moroccan Dpa Auditor
Last Audit
Jun 2025
Iso27017 Full Name
ISO 27017 certification for cloud-specific information security controls and best practices.
Scope
Iso27017 Scope
Region
Global Region
Last Audit
Pending
Iso27018 Full Name
ISO 27018 certification for personally identifiable information protection in public clouds.
Scope
Iso27018 Scope
Region
Global Region
Last Audit
Pending
Pci Dss Full Name
PCI DSS compliance for secure payment processing across all financial infrastructure.
Scope
Pci Dss Scope
Region
Global Region
Last Audit
Pending
Csa Star Full Name
CSA STAR certification demonstrating our commitment to cloud security best practices.
Scope
Csa Star Scope
Region
Global Region
Last Audit
Pending
HITRUST Common Security Framework
HITRUST CSF certification demonstrating healthcare data security and compliance readiness.
Scope
Hitrust Scope
Region
Global Region
Last Audit
Pending
Federal Risk and Authorization Management Program
Federal Risk and Authorization Management Program authorization for government cloud services.
Scope
Fedramp Scope
Region
US Region
Last Audit
Pending
Regional Programs
Regional compliance frameworks ensuring data residency and regulatory adherence across all operating jurisdictions.
Compliance with Moroccan data protection law (CNDP), ANRT regulations, and sovereign data residency requirements.
Active Certifications
Full GDPR compliance with EU data protection standards, cross-border transfer safeguards, and data subject rights.
Active Certifications
Compliance with African Union data protection frameworks and national data sovereignty regulations across operating markets.
Active Certifications
International compliance standards including ISO certifications, SOC 2, and industry-specific regulatory frameworks.
Active Certifications
Audit Reports
Detailed audit reports with findings, recommendations, and remediation tracking for all infrastructure operations.
| Document | Period | Auditor | Type | Access |
|---|---|---|---|---|
SOC 2 Readiness Assessment | FY 2025 | PwC | Readiness Assessment | |
ISO 27001 Gap Analysis | FY 2025 | BSI Group | Gap Analysis | |
Penetration Test Report | Annual | TrustedSec | Penetration Test | |
Cloud Security | FY 2025 | KPMG | Cloud Security Assessment | |
GDPR DPIA | FY 2025 | Ernst & Young | DPIA Assessment | |
CNDP Registration | FY 2025 | CNDP | Data Protection Registration | |
BC Test | FY 2025 | Deloitte | Business Continuity |
DPA
Data Processing Agreements ensuring compliant handling of personal data across all service tiers.
Data minimization principles
Purpose limitation enforcement
Storage limitation policies
Data subject rights support
Processing records maintained
International transfer safeguards
Quick Reference
Explore our technical glossary and API documentation.