Greenly Security Certifications: Protecting Your Environmental Data
Learn how Greenly protects financial and operational data with strong security standards.
Our security posture is validated by independent third-party auditors and continuous monitoring.
Core Certifications & Audits
1. SOC 2 Type II
Greenly undergoes an annual SOC 2 Type II examination. The 2026 audit period is planned for July 15, 2026 through October 15, 2026 and includes all five Trust Services Criteria. The report is prepared by independent auditors (Sensiba) and provides assurance that our service commitments and system requirements are achieved based on the trust services criteria:
Security: Protection against unauthorized access
Availability: Ensuring systems are accessible for operation and monitoring
Confidentiality: Protecting information designated as confidential
Processing Integrity: Ensuring system processing is complete, valid, and accurate
Privacy: Managing personal information in conformity with our privacy notice
2. ISO/IEC 27001
We maintain an ISO/IEC 27001: 2022 certified Information Security Management System (ISMS). Greenly's certification was renewed by AFNOR in July 2026. The current certificate and Statement of Applicability (SoA) are available from the Greenly Trust Center. This certification confirms that Greenly has implemented a comprehensive suite of security controls—from physical security to software development—to manage risks and protect information assets.
Technical Security Standards
Our certifications are supported by robust, "Security-by-Design" technical measures:
Data Residency & Sovereignty: All customer data is hosted in Europe(primarily GCP France), ensuring compliance with GDPR and local data residency requirements
Encryption: We use industry-standard encryption to safeguard your data:
At Rest: Data in our databases (PostgreSQL) is encrypted using AES-256-In Transit: All data movement is protected via SSL/TLS 1.3 secured connections
Continuous Monitoring: We utilize Vanta for 24/7 automated monitoring of our security controls and Datadog for real-time security signals and log analysis
Penetration Testing: We conduct annual third-party penetration tests to identify and remediate potential vulnerabilities before they can be exploited
Employee & Operational Security
Security is embedded in our company culture and daily operations:
Access Control: We follow the principle of Least Privilege. Access to customer data is strictly controlled via Role-Based Access Control (RBAC) and is reviewed quarterly
Identity Management: Multi-Factor Authentication (MFA) is enforced across all critical cloud resources.
Training: 100% of Greenly employees complete mandatory security awareness training upon hire and annually thereafter
Secure SDLC: Our development process includes automated code checks, peer reviews, and mandatory unit testing to ensure no code enters production without passing security gates
Accessing our Reports:
Existing customers and qualified prospects can request our full SOC 2 Type II Report or view our live security posture through our Vanta Trust Center. Please contact your Account Manager or our Support team for access.