Our management systems are regularly audited by independent bodies. The certified scope covers the development, implementation, provision and support of an occupational safety management solution, as well as ongoing assistance and consulting.

ISO 9001 – Certified Quality Management

What does the certification mean?

ISO 9001 is the internationally recognized standard for quality management systems. The standard outlines requirements that enable organizations to systematically structure their processes, clearly define responsibilities, measurably improve performance, and continuously enhance the quality of their products and services.

What does this mean for customers?

Our ISO 9001 certification gives you the assurance of working with a partner that operates according to clearly defined quality standards. For your projects, this means structured workflows, transparent communication, clearly defined responsibilities, reliable delivery - from initial consultation and implementation through to ongoing support. Through regular reviews and continuous improvement, we ensure that our processes remain consistently focused on quality, efficiency, and customer satisfaction.

What does the certification mean?

ISO 45001 is an international standard for occupational health and safety management systems. It provides organizations with a framework to manage risks, improve occupational health and safety performance, and systematically promote safe and healthy working conditions.

What does this mean for customers?

Our ISO 45001 certification demonstrates that occupational health and safety is firmly embedded in our own day-to-day operations. For you, this means that we understand the requirements of systematic occupational health and safety not only from developing eplas, but also from putting them into practice within our own organization. This understanding informs our consulting, our processes, and the ongoing development of our solutions, ensuring you work with a partner that approaches occupational safety holistically and implements it responsibly.

What does the certification mean?

ISO/IEC 27001 is the world's best-known standard for information security management systems. It defines requirements for an ISMS and helps organizations systematically manage information security across people, processes, and technology.

What does this mean for customers?

Our ISO/IEC 27001 certification demonstrates that we manage information security systematically, audit it regularly, and continuously improve it. This is particularly important for you because digital HSE management systems such as eplas process sensitive corporate, employee, and process data, depending on the use case. The certification confirms that we assess risks in a structured manner, define protective measures, and firmly embed information security into our processes - spanning everything from development and operation to support.

Since eplas processes sensitive corporate, employee, and process data—depending on the specific area of ​​application—we view information security as the interplay of organization, processes, IT infrastructure, data protection, access rights, and regular audits.

ISO/IEC 27001 certification demonstrates that we systematically organize, document, audit, and continuously improve information security. This is underpinned by an information security management system, or ISMS. This goes beyond isolated technical safeguards and takes a holistic approach: risks are assessed, appropriate measures are defined, responsibilities are assigned, and processes are regularly reviewed.

For you, this means: You are working with a software partner that manages information security systematically in line with an internationally recognized standard. This is particularly relevant when sensitive corporate, employee, or process data is processed within eplas. ISO/IEC 27001 fosters transparency and trust—especially for IT, data protection, procurement, compliance, and all specialist departments that rely on verifiable assurance of information security.

TISAX stands for Trusted Information Security Assessment Exchange and is an established standard for information security assessments, particularly within the automotive industry and security-sensitive supply chains. It is based on the VDA ISA catalog, which defines requirements for handling sensitive information, prototype protection, data protection, and other security-related topics.

We have successfully completed a TISAX assessment at Assessment Level 3. Assessment Level 3 involves a comprehensive verification of compliance with the applicable requirements. The assessment covers documents and evidence as well as processes, responsibilities and the practical implementation of information security measures.

For you, our TISAX assessment means: You can rest assured that our information security measures have been assessed against a recognized industry standard. This is particularly valuable for companies with stringent security requirements—such as those in the automotive industry, industrial sectors, or other regulated supply chains. TISAX supports your supplier assessment, streamlines internal approval processes, and establishes a robust foundation for collaborating with a software partner entrusted with sensitive information.

With eplas, you choose a software solution developed and supported in Germany—and, if desired, hosted in German data centers. Development, consulting, implementation, customer service and support are all provided by our in-house team. This means partnering with a company that closely integrates product development with customer support and maintains clear lines of responsibility. You also benefit from streamlined communication, German-speaking points of contact, clearly defined roles, and direct access to our product expertise.

eplas also offers flexible hosting options: as a SaaS solution, our HSE management software is hosted in German data centers. Under this model, we operate the server infrastructure and take care of hosting, backups, IT and data security, scaling and software updates. Data processing is carried out in accordance with applicable European and German data protection requirements, in particular the GDPR and the German Federal Data Protection Act (BDSG).

Alternatively, eplas can be deployed on-premises within your own IT infrastructure. In this scenario, you provide the necessary server components and run the software on your own network.

For you, this means: You can choose the operating model that best fits your IT strategy, data protection requirements and internal policies - while relying on software developed in Germany and clearly defined operational responsibilities.