Boost.space

Founded in 2017

Boost.space recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Boost.space so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Founded in 2017

Compliances

SOC 2

Certified

ISO 27001

Certified

GDPR

Compliant

HIPAA

Compliant

Google CASA - Tier 2

Compliant

Trusted by

Seznam.cz

Škoda X

Decathlon

BigBoard

Praga

Conseq

Controls

Data security

Testing for Reliability and Integrity

Network security

Transmission Confidentiality

Centralized Collection of Security Event Logs

App security

Conspicuous Link To Privacy Notice

Endpoint security

Malicious Code Protection (Anti-Malware)

Full Device or Container-based Encryption

Corporate security

Code of Business Conduct

Organizational Structure

Roles & Responsibilities

Resources

Business Continuity & Disaster Recovery Policy

Policy

Acceptable Usage Policy

Policy

Asset Management Procedure

Policy

Asset Management Policy

Policy

Data Breach Notification Policy

Policy

Communications & Network Security Policy

Policy

Subprocessors

Microsoft Azure

IT infrastructure

Stripe

Finance

Miro

Design

MasterDC

IT management

OpenAI

Artificial Intelligence

Slack

Collaboration & Productivity

Updates

New Security Milestones: SOC 2, GDPR, and HIPAA

Apr 10, 2026

We’ve been busy behind the scenes. While Boost.space helps you sync your data, we make it our job to keep that data locked down. We’ve recently hit three major security benchmarks—SOC 2 Type I, GDPR, and HIPAA—to give you even more peace of mind.

SOC 2 Type I: Strong Foundations SOC 2 certification is the industry standard for cloud companies. Type I focuses on evaluating whether our security controls and processes are properly designed and in place at a specific point in time.

For you, this means:

Structured Security: Our internal processes are thoughtfully designed to prevent unauthorized access.
Clear Framework: We have established controls aligned with industry best practices.
Transparency: You can trust that your data is handled with a strong emphasis on security and professional care.

GDPR Compliance: Respect for Your Data Compliance with the General Data Protection Regulation (GDPR) reflects our commitment to protecting personal data and respecting user privacy. It ensures that we handle information responsibly, transparently, and in line with strict European standards.

For you, this means:

Data Protection by Design: Privacy and security are built into our systems from the ground up.
Control & Clarity: You have clear visibility into how your data is used, with the ability to manage and control it.
Trust & Accountability: We follow established processes to ensure your data is handled lawfully, fairly, and with full responsibility.

HIPAA: Ready for Sensitive Data For our users in healthcare and insurance, HIPAA compliance is a game-changer. This ensures that we meet the strict federal standards required to handle Protected Health Information (PHI).

We’ve strengthened our infrastructure with:

Enhanced Encryption: Protecting patient and sensitive medical data at rest and in transit.
Strict Privacy Protocols: Administrative safeguards that keep sensitive info restricted to the right people.
Peace of Mind: You can scale your medical or wellness business without worrying about compliance gaps.

Your Data, Our Priority: Boost.space is Officially ISO 27001:2022 Certified

Feb 2, 2026

Not just compliant, but certified!

We have successfully completed the ISO 27001:2022 certification process. It's another vital piece of the puzzle that demonstrates to our clients that we take their data security with absolute seriousness.

This process wasn't just about getting a "piece of paper" – it helped us fine-tune our internal rules to ensure everything is under total control and all risks are minimized.

What is ISO/IEC 27001:2022?

It is an internationally recognized standard for an Information Security Management System (ISMS). The 2022 version is the latest update, specifically designed to address modern challenges like cloud services and remote work.

The certification stands on three main pillars:

Confidentiality: Ensuring only authorized persons have access to data.
Integrity: Ensuring data is accurate and protected against unauthorized changes.
Availability: Ensuring information and services are available whenever you need them.

What brings the 2022 version?

Compared to older standards, the 2022 version brings a modernization that perfectly fits our technology stack. It covers the design, development, maintenance, technical support, sales, and marketing of all Boost.space s.r.o. applications. The certification ensures we are aligned with the most current security practices.

What does this mean for you, our clients?

Our certificate was issued by TNV and is accredited by IAS (International Accreditation Services). This is your guarantee that we handle your information responsibly:

Maximum Trustworthiness: We are a verified partner for the enterprise sector and government agencies.
Compliance Made Easy: We help you meet strict legal requirements and international security standards.
Prevention First: Our ISMS systematically identifies vulnerabilities before any potential incident can occur.

Create your own Trust Center | Powered by