netcup
Cloud infrastructure · netcup.com · last read 2026-11-09
At a glance
- Is netcup GDPR compliant?
- No tool is GDPR compliant on its own: compliance depends on what you process with it and how. What follows is what netcup itself publishes, each answer linked to its source and the date we read it.
- Is netcup ISO 27001 certified?
- netcup states ISO/IEC 27001 certification, and its own page links to the certificate. In netcup's words: “We have been successfully certified according to ISO 27001 since 2023.” We read this on 2026-11-09. Source and date
The same questions for any vendor, and the rule behind each: the vendor due diligence checklist.
Identity
| Legal entity | netcup GmbH |
|---|---|
| HQ | DE |
| Parent company | — |
| Ultimate ownership | — |
| EU contracting entity | — |
| LEI | 529900SDJDSG1L9O1F79 |
| US CLOUD Act reach | Not determined from the sources read |
| Source | netcup.com · 2026-11-09 |
Legal entity from the vendor's own terms. LEI, registered country and parent company from the Global LEI Index (GLEIF); ownership is left empty where GLEIF names no parent. The CLOUD Act row is arithmetic over those countries, not an assessment of risk.
Data location
No data-location observation recorded yet.
The same question for every vendor: where SaaS vendors store EU data.
Other European cloud providers, their registers and certifications: sovereign clouds.
Subprocessor chain
Processing terms
No data processing agreement read yet.
These terms side by side for every vendor: data processing agreements compared. What vendors give you for a transfer impact assessment: transfer impact assessments.
Assurance
Is netcup ISO 27001 certified?
netcup states ISO/IEC 27001 certification, and its own page links to the certificate. We read this on 2026-11-09.
- Certificate published “We have been successfully certified according to ISO 27001 since 2023.”
Source: netcup.com, 2026-11-09
On the same list netcup also names ISO/IEC 27701. Each standard's page says how it relates to ISO/IEC 27001.
Of the 122 vendors in this registry whose own pages state ISO/IEC 27001, 16 link to the certificate, 43 say it is available on request, and 63 state it without saying how to get it. A certificate names the certification body, the scope and the expiry date: those are the three things to check.
| Scheme | Status | Scope | Source | Observed |
|---|---|---|---|---|
| ISO 27001 · ISO27001 | Certificate published | Scope of certification: Development, Marketing, Sales, vServer, Web Hosting, Domains, SSL certificates, Groupware, Software, Managed Hosting | netcup.com | 2026-11-09 |
| ISO 27701 · ISO27701 | Certificate published | Scope of certification: Development, Marketing, Sales, vServer, Web Hosting, Domains, SSL certificates, Groupware, Software, Managed Hosting | netcup.com | 2026-11-09 |
| ISO 9001 · ISO9001 | Certificate published | All netcup processes; Scope of certification: Development, Marketing, Sales, vServer, Web Hosting, Domains, SSL certificates, Groupware, Software, Managed Hosting | netcup.com | 2026-11-09 |
| ISO 14001 | Certificate published | All processes at netcup; Scope of certification: Development, Marketing, Sales, vServer, Web Hosting, Domains, SSL certificates, Groupware, Software, Managed Hosting | netcup.com | 2026-11-09 |
SecNumCloud, C5, ENS and HDS for every vendor, with the pages for ISO standards, SOC 2 and TISAX: certifications compared.
Official registers
| Register | Offering, as the register names it | Status | Level | Valid until | Observed |
|---|---|---|---|---|---|
| Global LEI Index (GLEIF) | netcup GmbH · netcup GmbH | ISSUED | DE | 2027-12-08 | 2026-11-09 |
- ACN qualified cloud (Italy): checked 2026-11-09, no entry under netcup; netcup GmbH
- DORA critical ICT third-party providers (ESAs): checked 2026-11-09, no entry under netcup; netcup GmbH
- ENS certificates of conformity (CCN, Spain): checked 2026-11-09, no entry under netcup; netcup GmbH
- EU Cloud Code of Conduct (GDPR Art. 40): checked 2026-11-09, no entry under netcup; netcup GmbH
- FedRAMP Marketplace (US): checked 2026-11-09, no entry under netcup; netcup GmbH
- SecNumCloud qualified services (ANSSI, France): checked 2026-11-09, no entry under netcup; netcup GmbH
What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.
Support window
Not yet collected. This row will say not declared only once we have read a lifecycle or security page and found no period stated — see support windows.
Documents
| Document | Disclosure | Transcription | HTTP | Observed |
|---|---|---|---|---|
| certifications | Public | full | 200 | 2026-11-09 |
History
Nothing has moved since we started watching this vendor on 2026-11-09. Changes appear here only after a human has reviewed them.
Every reviewed change across the registry, newest first: vendor changes.