Information security
TISAX® Assessment
Scope SRLHLZ · Standard Scope 2.0.1
Valid through: 10 December 2027
Security & Trust
Security, privacy and operations as a clear commitment.
NP4 protects sensitive enterprise, travel and personal data throughout its lifecycle. The Trust Center makes protection objectives, responsibilities and the security framework clear.
Request security documentationRead the guideline
Need further evidence for your review? Tell us which documents you need.
Enterprise trust
Data processing in Germany. Information security, data protection and sustainability backed by transparent evidence.
Privacy & data processing
Operations and processing in Germany
Data processing agreements in accordance with Article 28 GDPR
Sub-processors documented for the relevant product, contract and configuration
Sustainability & corporate responsibility
EcoVadis Committed Badge
Traceable responsibilities
Sustainability evidence documented separately
Verifiable evidence
Do not just claim security and sustainability — show the evidence
TISAX® Assessment
Current assessment evidence
- Scope:
- SRLHLZ · Standard Scope 2.0.1
- Valid through:
- 10 December 2027
- Assessment ID:
- ATPC58-1
- Objectives:
- Data Protection (EU-GDPR Art. 28 Processor) · High Availability · Confidential
The assessment result is available (“Result Available”).
Open assessment document
EcoVadis · May 2026
EcoVadis Committed Badge
NP4’s Sustainability Rating was documented with the EcoVadis Committed Badge in May 2026.
Open EcoVadis recognition
Data centre provider · Colt DCS
Travel Data Suite: operated in Frankfurt
The Travel Data Suite is operated at the Colt Frankfurt City Data Centre in Germany.
Sustainability & certifications
Colt DCS publishes evidence for environmental and energy management (ISO 14001 and ISO 50001), alongside CDP and EcoVadis ratings.
Evidence from Colt DCSColt Group ISO certificates
Colt Technology Services provides downloadable certificates identifying the relevant entities, locations and certification scopes.
Certificates from ColtData principles
Purpose, permission and configuration determine the data view.
Purpose-specific
Products and processes receive the fields defined for their purpose.
Configurable
Field scope, roles and distribution are defined for each implementation.
Traceable
Origin, processing and hand-offs remain part of the agreed data flow.
Transferable
A dependable exit path is considered in architecture and operations.
Binding guideline
The guideline sets out our information security and data protection principles.
FAQ
Questions about Security, privacy and operations
Where does NP4 process travel data?
NP4 operates and processes travel data in Germany. The specific contractual and technical scope is documented for each customer project.
Which security framework does NP4 use?
NP4's Information Security Management System is based on ISO 27001. NP4 has a TISAX® Assessment with 'Result Available'. Documented scope: SRLHLZ · Standard Scope 2.0.1. Valid through 10 December 2027. Assessment objectives: Data Protection (EU-GDPR Art. 28 Processor) · High Availability · Confidential.
Are further Security documents available?
Technical detail, evidence and due-diligence documents are provided for the specific product and operating scope through the agreed confidentiality process.
Can permissions and data views be configured?
The platform is designed to define field scope, permissions and purpose-specific product or process views for each implementation.
What evidence does your due-diligence process require?
Need further evidence for your review? Tell us which documents you need.