Compliance and certifications

The System and Organization Controls (SOC) govern how to report on the status of internal control parameters, including security and availability. It follows the AICPA Trust Services Principles and Criteria. DocuWare is certified for SOC 2, Type 2. Read more about SOC certifications for DocuWare Cloud below.

DocuWare is certified for integration with and deployment on SAP S/4HANA1709 via the SAP integration scenario S/4-BC-AL 7.40.

The Swiss Business Records Ordinance requires to ensure data completeness, validity, availability and legibility as well as logging the data migrations. DocuWare is certified and supports you in complying with these regulations.

DocuWare is certified for implementing and continuously improving its Information Security Management System (ISMS).

DocuWare is certified for its quality management system (QMS) in the area of development, sales and support of software for document management and workflow automation.

電子取引ソフト法的要件認証
In Japan, DocuWare fulfils the requirements for "Electronic Transaction Software" in compliance with the 2021 revision set by Japan Image and Information Management Association (JIIMA). DocuWare is certified by the authority.

電帳法スキャナ保存ソフト法的要件認証
In Japan, DocuWare fulfils the requirements for "Electronic Books Maintenance Act" in compliance with the 2021 revision set by Japan Image and Information Management Association (JIIMA). DocuWare is certified by the authority.

DocuWare has been awarded the Qualiopi certificate for its training courses in France by auditor Socotec. The certification attests to the quality of the training processes and provides greater clarity for companies and users regarding the training offered.

IDW ERS FAIT3/IDW PS 880: The GoBD are the principles for the proper keeping and storage of books, records and documents in electronic form as well as for data access issued by the German tax authority. DocuWare is certified and enables you in complying with these requirements.

DocuWare has been recognized as compliant with the requirements for providing cloud services to the Italian Public Administration. Its SaaS offering has officially been qualified with QC1 level (ID Card SA-6239) by the National Cybersecurity Agency (ACN).

The Agencia Tributaria (AEAT) is the Spanish tax authority. It prescribes the requirements for archiving paper-based documents as the basis for the deletion policy for paper documents. DocuWare is certified by AEAT.

As part of the reform on mandatory electronic invoicing, the French government has registered DocuWare as an Approved Platform (Plateforme Agréée, PA).

In Slovenia, the Protection of Documents and Archives and Archival Institutions Act (ZVDAGA) refers to the support of the complete digital content management process (archive and documentary). DocuWare is certified by the authority.

In Finland, DocuWare fulfils the requirements set by the National Archives’ Certification of electronic information systems to SÄHKE2 criteria.
DocuWare is certified by the authority.

The US Health Insurance Portability and Accountability Act regulates the protection of sensitive health information to prevent it from being disclosed without the patient’s consent or knowledge. There is no official HIPAA certification available at the moment. However, DocuWare enables you to secure data and documents to ensure HIPAA compliance.

The California Consumer Privacy Act governs how companies around the world must handle the personal information of California residents. Any violation of the rules may result in high penalties. Currently, there is no CCPA certification. With DocuWare, you can store and process data and documents to ensure CCPA compliance.

The European General Data Protection Regulation addresses the protection of personal data in the EU and the EEA. It affects EU-based companies and foreign companies operating in the EU. Currently there is no GDPR certification. DocuWare enables you to store and process data and documents to ensure GDPR compliance.

The Act on Protection of Personal Information applies to all companies in Japan that process personal information. It has an international scope of application similar to the EU GDPR. There is currently no certification for it. DocuWare enables your company to secure data and documents to ensure APPI compliance.

The Protection of Personal Information Act requires companies in South Africa to protect personal information collected from unauthorized access, unlawful use or loss and to obtain the consent of the individual. There is no POPIA certification. DocuWare enables you in complying with these requirements.

The Family Educational Rights and Privacy Act is a U.S. federal law that protects the privacy of students' education records, including personally identifiable information and directory information. DocuWare enables educational institutions to store and process data in compliance with FERPA. 

In the U.S., the Gramm-Leach-Bliley Act requires companies offering financial products or services to consumers, such as loans, financial or investment advice, or insurance, to explain their data-sharing practices to customers and protect sensitive data. DocuWare enables you to store and process data and documents in compliance with the GLBA.

In the U.S., the Children's Online Privacy Protection Rule imposes certain requirements on operators of websites or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age. DocuWare enables you to store and process data and documents in compliance with COPPA. 

The Sarbanes-Oxley Act is a US federal law administered by the Securities and Exchange Commission (SEC). Among other directives, SOX requires publicly traded companies to have proper internal control structures in place to validate that their financial statements accurately reflect their financial results.

The Cloud Security Alliance maintains the Security, Trust & Assurance Registry (STAR). STAR consists of three levels of assurance aligned with control objectives in the CSA Cloud Controls Matrix (CCM). 

The American Institute of Certified Public Accountants (AICPA) has developed the Service Organization Controls (SOC) framework, a standard for controls that safeguard the confidentiality and privacy of information stored and processed in the cloud.

The Federal Information Processing Standard Publication 140-2 is a U.S. government standard that defines minimum security requirements for cryptographic modules in information technology products.

Code of practice designed for organizations to use as a reference for selecting cloud services information security controls when implementing a cloud computing information security management system based on ISO/IEC 27002.

The Cybersecurity Framework of the US National Institute of Standards and Technology consists of standards to manage cybersecurity-related risks. Its special publication 800-171 is about Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations.

4.6 out of 5 stars in Content Services Platforms 2026.

Recognized on The ECM Value Matrix from Nucleus Research.

Leader on the G2 Grid for Enterprise Content Management 2019-2026.

Listed on the Capterra Shortlist 2026.

Listed as a Front Runner on Software Advice in 2026.

DocuWare earned the SaaS Leader 2023 Award in the category "Documents and Processes" by Cloud Ecosystem.

DocuWare was acknowledged as Preferred Vendor in the category "Software & Software as a Service" in 2026.

In the category “Cloud Service Provider of the Year”, DocuWare was awarded “Highly Commended” in 2026.

Ranked "Best Document Management Software for Integrations" in 2026 by business.com. 

Voted Best ECM/Document Management Provider at The Cannata Report Awards Gala, USA

Voted Best ECM Solution 2023-2024 for SMBs by independent testing laboratory DataMaster Lab in France.

Re-elected as the leading ECM provider for the mid-market in Blueprint 2025/2026 by consulting firm Exaegis (Markess), France.

Voted Best DMS Solution 2023 at the “21st Century National Technology Awards” in Spain.

TOP 4 best DMS solution 2024 on SoftDoit in Spain.

Stevie Awards for customer satisfaction ratings for international support services.

DocuWare was voted Accounts Payable / Invoicing Product of the Year 2023 at Document Management Awards, UK.