The Secure Data Access Center (CASD) has reached a major milestone by becoming the first data hosting service in Europe to obtain official GDPR certification issued under Article 42 GDPR. This official recognition, awarded on May 16, 2025 in Venice during the Privacy Symposium, enshrines CASD’s rigor and commitment to the security and protection of personal data.
This certification confirms CASD’s pioneering role in the protection of personal data and the implementation of security technologies for the processing of sensitive data. This certification is based on the reference framework developed and maintained by the European Centre for Certification and Privacy (ECCP, https://eccpcenter.org), and approved by the European Data Protection Board (EDPB, https://www. edpb.europa.eu/), an independent body bringing together the heads of national supervisory authorities.
As a result, Europrivacy certification is officially recognized by the data protection authorities of 30 countries: all EU and EEA member states.
The certification was issued by TAM-CERT, an independent, accredited certification body specializing in data security and protection, which conducted an exhaustive audit of CASD according to the methodology prescribed by Europrivacy to assess, document, certify and enhance compliance with the European General Data Protection Regulation.
In addition to this new GDPR compliance certification, CASD already holds numerous reference certifications: ISO 27001, ISO 27701, Hébergeur de Données de Santé (HDS). It is also approved to the National Health Data System (SNDS) security standard and compliant with the Health Data Warehouse (EDS) standard. It had already been the first French organization in 2020 to be certified to ISO 27701, an international standard dedicated to the protection of personal data, already incorporating many of the requirements stemming from the GDPR.
CASD is very pleased to be the first in Europe in the field of data hosting to have obtained formal RGPD certification. It validates and underlines our commitment to data security and protection.
