Trusted: CISPE and data protection


These Trustmarks apply only to cloud infrastructure services declared under the CISPE Data Protection Code (2016 Version) prior to May 2021. These Trustmarks will be updated to comply with the latest version of the CISPE Data Protection Code once it is formally approved by the CNIL.

Any company that provides Infrastructure as a Service (IAAS) in line with our Code of Conduct is eligible to apply for an official CISPE trust mark.


The ‘Declared’ mark is awarded to services and providers that have fulfilled the self-assessment process for our Code of Conduct.


The ‘Certified’ mark is given to services and providers that can evidence third party certification of compliance with the CISPE Code of Conduct.

Using CISPE data protection trust marks is subject to :

  1. Declaring your service to CISPE and receiving a declaration number
  2. Paying the fees required
  3. Accepting the licensing contract that covers CISPE trust marks