Our policies and terms governing your use of Implora
Updated 29 August 2026What changed
How Implora processes personal data on behalf of customers under GDPR Article 28.
Latest change: Cloudflare added as a sub-processor (Annex B). It fronts the Implora portal and API and processes end-user IP addresses and request metadata in transit.
View Data Processing AgreementUpdated 29 August 2026What changed
What personal data Implora collects, why, where it is stored, and the rights you have over it.
Latest change: Cloudflare added to the non-EU processors (5.1) with its transfer safeguards (6.2).
View Privacy PolicyUpdated 28 September 2026What changed
The terms that govern your use of the Implora platform: accounts, permitted use, fees, liability, and termination.
Latest change: How additional tenants are charged on plans with per-tenant pricing: counted daily, charged per calendar month on the highest count, removed tenants charged until month-end, and charged during a free trial (9.4).
View Terms of UseThe current list of sub-processors engaged to process customer personal data, maintained in accordance with Annex B of our Data Processing Agreement.
View Sub-processorsAt Implora, security and compliance are at the core of everything we do. Our platform is independently penetration tested, our information security management system is certified to ISO/IEC 27001:2022, and we continue to strengthen industry-leading security standards to protect your data and operations.
Certified, Grade A+
Independent penetration test of the Implora portal by Astra Security. Issued Jul 28, 2026, valid until Jul 28, 2027. Verify the certificate with certificate ID f554021c-4229-4f5a-b837-d3c9d0be823a. Need the full report for a vendor review? Request it here.
A+ (125/100)
Mozilla's HTTP Observatory scans the Implora portal's security headers, covering CSP, HSTS, cookies, CORS, and more. Every check passes, with bonus points lifting the score above 100. View the live report.
Certified
Our information security management system (ISMS) is certified to ISO/IEC 27001:2022 by Intercert, registration number IC-IS-2608276. Issued Aug 25, 2026, valid until Aug 24, 2029, with surveillance by Aug 24, 2027. Statement of Applicability version 3.0. Verify with Intercert. Need the certificate for a vendor review? Request it here.
Certified scope: The Information Security Management System at sky made simple ApS covering the design, development, operation, delivery, and support of the Implora Software-as-a-Service (SaaS) platform for cloud security and compliance management, hosted on Microsoft Azure (EU), including the functions of Software Development, Cloud Platform Operations, Information Security, Customer Support, and Sales.
In Progress
Service Organization Control 2 Type II certification, demonstrating our commitment to security, availability, and confidentiality controls over time.
Registered
Implora® is a registered trademark of Implora ApS in the European Union (EUIPO).