Irish-owned since 2006 ISO 27001:2022 certified
Trust Centre

How we protect your data and ours

You trust us with your systems. Here's what we hold ourselves to, and who to ask when you need more detail.

Certification

ISO 27001:2022 certified since 2021

Our own information security management system is independently certified to ISO 27001:2022. We've held ISO 27001 certification since 2021, so the standards we help clients reach are the ones we work to every day.

What that means for you

  • Independently audited security management
  • In-house Irish team, with no outsourcing of your service desk
  • 24/7 monitoring of the systems we manage
  • Verified identity before anyone can access or change personal information
  • Encrypted connections to our website, secured with SSL
Your data

How we handle personal information

Our privacy policy sets out exactly what we collect and why. In short:

Kept confidential

We undertake to keep the information you give us confidential.

Kept only as long as needed

We hold personal information only as long as we need it to deliver services, meet legal obligations or deal with legal claims.

Clear contacts

Questions about our privacy policy go to privacy@nostra.ie. Read the full privacy policy.

For your organisation

Compliance support, from gap assessment to audit

The experience behind our own certification is available to you. We design information security management systems, implement technical and organisational controls, and keep audit evidence up to date.

Compliance services

Frameworks we support

  • GDPR alignment, data handling policies and monitoring
  • ISO 27001 and ISO 22301, from readiness to certification
  • NIS2 evidence and controls
  • Cyber Essentials and Cyber Essentials Plus
  • Continuous compliance monitoring and reporting
Documents and policies

Read the detail

Need our certificate or security documentation for a supplier review? Get in touch and tell us what your review requires.

Not sure where to start?

Book a free 30-minute IT health check. We'll tell you what's working, what's at risk and what we'd fix first. No obligation.