Snapshot 240782
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Dcycle We help organizations measure and reduce their carbon footprint across Scopes 1, 2, and 3, centralize ESG data, and produce audit ready reports for regulations like the EU CSRD. We connect to your existing systems to automate data collection, provide transparent calculations and clear dashboards, and guide reduction actions with trackable targets. We are built for fast onboarding and real collaboration, turning sustainability metrics into reliable business insights your team and stakeholders can trust. security@dcycle.io Privacy PolicyOpens in new tab Security at Dcycle Dcycle is the data infrastructure for corporate sustainability. We help over 800 companies govern and exploit their non-financial data through a single System of Record — and we treat the security of that data with the same rigour we bring to its accuracy. Certified by TÜV Rheinland Dcycle holds ISO 27001 certification for information security management and ISO 14064 certification for carbon accounting accuracy, both issued by TÜV Rheinland. Built on AWS, hosted in the EU Our platform runs on Amazon Web Services in the eu-west-1 (Ireland) region, using a multi-account architecture with isolated environments for development, staging, and production. All data stays within the European Union. Encrypted everywhere Data is encrypted at rest (AES-256 across all storage layers) and in transit (TLS). Credentials and secrets are managed through AWS Secrets Manager — never hardcoded or stored in application code. Network isolation by design Databases reside in isolated subnets with no direct internet access. AWS VPC Endpoints provide private connectivity to services, and security groups enforce least-privilege access at every layer. Independently tested Dcycle undergoes regular third-party penetration testing to identify and remediate vulnerabilities before they become risks. Results and remediation evidence are available upon request. GDPR compliant As a European company processing non-financial enterprise data, Dcycle operates in full compliance with the General Data Protection Regulation (GDPR), including Article 32 requirements for data processing security. Continuous monitoring and audit trail AWS CloudTrail is enabled across all accounts. Infrastructure is managed as code (AWS CDK), with automated CI/CD pipelines that include unit, integration, and acceptance testing before any deployment reaches production. Data sovereignty Dcycle follows an "Own" model: our clients retain full ownership and control of their data, with complete audit rights and standard export capabilities. We provide the infrastructure — you own the data. For questions about our security posture, certifications, or to request additional documentation, please reach out to our team at security@dcycle.io Resources View all Access Control Policy Asset Management Policy Business Continuity and Disaster Recovery Plan Code of Conduct Cryptography Policy Data Management Policy Human Resource Security Policy Incident Response Plan Information Security Policy (AUP) Controls View all Infrastructure security Application security requirements Information security for use of cloud services Clock synchronization Organizational security Determining the scope of the information security management system Awareness Operation planning and control View 6 more Organizational security controls Product security Secure development life cycle Internal security procedures Information security objective and planning to achieve them Information security risk treatment Understanding the organization and its context View 14 more Internal security procedures controls Data and privacy Classification of information Labelling of information Acceptable use of information and other associated assets Subprocessors View all Amazon Web Services Anthropic Cloudflare Inc Provides network security and performance services, including DDoS protection, essential for maintaining website availability and security. OpenAI AI service provider offering natural language processing models (like GPT) used in automation, product enhancement, and customer interaction workflows. Updates View all General Test Update Published June 15, 2026 Test Update.