When security is not just GDPR

Frederik Møller Hansen, Global Business Relationship Manager at Danoffice IT, speaking on the phone at the company’s office

Maintaining a high level of security is not enough unless we continuously ensure that it is upheld in practice.

That is why we have implemented an Information Security Management System (ISMS) and are certified according to ISO 27001, the international standard for information security. This certification demonstrates our systematic approach to protecting data against unauthorized access, loss, and misuse. In addition, we operate in accordance with the requirements of the NIS2 Directive for cybersecurity and risk management.

We are also certified under ISO 14001, reflecting our commitment to environmental responsibility. This certification ensures that our operations align with internationally recognized environmental management standards, helping us reduce our environmental impact while maintaining high standards of security, compliance, and continuous improvement.

Danoffice IT employee standing in a warehouse, holding used IT equipment for refurbishment and reuse

Our ISMS

We are entrusted with our customer’s data stored on the equipment we pick up and process. That creates a great need for mutual trust and in particular, that GDPR is being adhered to.

That is why we have implemented an Information Security Management System (ISMS) and achieved ISO 27001 certification, the international standard for information security management.

To ensure that we adhere to our internal security requirements, we conduct regular internal controllers and we are also subject to an annual audit by an external law firm.

Close-up of two hands with a ring on one finger typing on the black keyboard of a Lenovo laptop Danoffice IT

Our own control and the external audit

The following is entailed in our own controllers and the external audit:

Data-wipe policy
Procedures for auditing of transporters and collaborative partners
Procedures for IT security and area security
Risk assessment for Danoffice IT Green
Controllers

ISO 27001-certified

We are proud to be ISO 27001 certified. ISO 27001 is the internationally recognized standard for information security management and demonstrates our ability to protect data, manage risks, and maintain robust processes across the organization.

For our customers, this means that information security is an integral part of how we operate and deliver our services. ISO 27001 provides a structured framework for managing, monitoring, and continuously improving our information security, enabling us to:

Identify and manage security risks systematically
Protect sensitive data against unauthorized access, loss, and misuse
Ensure documented processes and continuous improvement
Support compliance with GDPR and NIS2-related requirements

ISO 14001 Certification

We are proud to be ISO 14001 certified, which is the internationally recognized standard for environmental management. This certification demonstrates our commitment to reducing our environmental impact, complying with applicable regulations, and continuously improving the way we manage sustainability. For our customers, it means you can trust that environmental responsibility is an integral part of how we operate and deliver our services. ISO 14001 provides a structured framework for managing and improving our environmental performance.

It enables us to:

Analyze environmental data more effectively
Reduce our environmental footprint
Set measurable goals and action plans for continuous improvement

Discover how ISO 14001 strengthens our environmental efforts and supports our long-term ESG goals.

Read More About ISO 14001

ISO 14001:2015 certificate awarded to Danoffice IT for environmental management

NIS2-compliance

We operate in accordance with the requirements of the NIS2 Directive for cybersecurity and risk management. This supports our efforts to protect data, strengthen our security posture, and ensure resilient operations. NIS2 compliance helps us to:

Identify and manage security risks systematically
Strengthen our cybersecurity and incident preparedness
Ensure a structured approach to governance and compliance
Protect critical data and business processes