Skip to content
Ditap®
Trust CenterCompliance

Regulatory compliance

Where we actually stand today on GDPR, ISO 27001 and NIS2 — no badges for certifications we don't hold.

GDPR — Reglamento (UE) 2016/679

Service-specific scope

DITAP SpA operates this website. Our privacy policy describes processing purposes and rights channels. GDPR applicability depends on the processing and territorial scope. When processing on behalf of a client, instructions and responsibilities are documented in the applicable data processing agreement. Contact: hola@ditap.io.

See sub-processors

ISO 27001

Service-specific scope

DITAP is not ISO 27001 certified. Supplier certifications cover their own services and do not automatically certify DITAP. We can review project requirements and available evidence before contracting.

See security practices

NIS2

Service-specific scope

NIS2 applicability depends on activity, size and national law. DITAP’s technical scope is agreed for each project; contracting a service does not itself certify organizational compliance.

Does your legal or procurement team need more detail?

We share our Privacy Policy, the sub-processor list and, where applicable, a DPA draft.

Email hola@ditap.io

PEOPLE, PROCESS AND SUPPORT

Alongside you, before, during and after.

A clear first conversation. A written proposal. Next steps agreed together.

  1. Before: understand and define

    We discuss your needs and set out objectives, deliverables, timelines and costs in the proposal.

  2. During: coordinate the work

    We agree on responsibilities, stages and the information needed to move forward. Launch and training are defined for each project.

  3. After: know what comes next

    We agree on support channels, hours and scope so you know whom to contact.

Answers before you decide.

What will I receive before signing?

A written proposal with scope, deliverables, stages, pricing and terms, including any additional services you choose.

How is support organized?

We define contact channels, hours and support scope in the proposal, so you know what is included and how to request help.

What happens to my organization’s information?

We review what information is needed, who can access it and how it is shared. For software systems, we also agree on backup, retention and export conditions.

Discuss your project ↗Meet the people behind DITAP

TECHNOLOGY THAT SUPPORTS YOUR TRUST

A protected technology foundation.

HTTPS / TLS

Encrypted connections

Your browsing on this website uses HTTPS/TLS to protect information during transmission.

AES-256

Infrastructure encryption

Vercel, this website’s hosting provider, documents AES-256 encryption for data stored on its infrastructure.

DITAP

Protection for your operation.

Each project defines its services and the protection needs of information and operations.

Explore the provider’s safeguards