Our vision: enabling secure and purposeful digital use

We see data protection as a modern human right in a digital world. We help ensure that every company respects individuals’ right to informational self-determination by enabling them to reliably implement data protection, data security, and digital sovereignty. For us, digital sovereignty encompasses self-determination as well as the ability of people and companies to use digitalization for their own benefit.

Our mission: securing digital rights

To this end, we provide the necessary technological foundations and promote an adequate understanding of data protection and data security through focused information and communication. We also uphold the right of every individual to determine how their own data is disclosed and used. We firmly reject surveillance, exploitation, manipulation, lack of transparency, and forced dependence on providers.

Our security concept for your data

Evalanche reliably protects your data at all levels and in accordance with the highest security standards against loss, theft, and misuse—thanks to a comprehensive security architecture.

Our data protection package contains all the relevant information for data protection officers and security officers! You can request this from us at sales@evalanche.com.

27001 Certified for Top Security Standards

SC-Networks is TÜV-certified according to ISO/IEC 27001. Certification according to the leading international standard for information security management systems proves compliance with the highest IT security standards throughout the company. This allows us to demonstrate the security and quality of our IT systems and business processes to our customers and partners. Further certifications and memberships:

• The “IT Security made in Germany” certification confirms that our IT security solutions are trustworthy and developed exclusively in Germany, and that our company complies with German data protection law.
• Through our DDV membership, we are bound by Evalanche's code of ethics for legally compliant permission marketing. We therefore explicitly distance ourselves from sending unsolicited advertising by email.
• Evalanche is certified by the Certified Senders Alliance (CSA) and is therefore a member of the CSA whitelist. This ensures high delivery rates when sending emails.
• Through cooperation with Internet service providers (ISPs) and continuous blacklist monitoring, we protect ourselves against mailing blocks.
• By continuously checking against Robinson lists, we prevent the receipt of unwanted advertising via Evalanche.

Learn more about our certifications and memberships – from ISO 27001 and CSA to cloud services “made in Germany.”

Security – at the heart of Evalanche | SC-Networks

Compliance with certain technical and organizational measures serves to ensure data protection and data security as well as the confidentiality, integrity, and availability of the information processed within the company.

Crisis resilience (business continuity management)

As part of information security, we evaluate and document the availability of systems. A comprehensive emergency plan provides the framework for instructions, which are to be applied in documented emergency scenarios. Continuously updated exercise plans test the measures and document test execution, rounding out the emergency management system. Multi‑year service contracts with short response times (mission‑critical) are in place for all critical servers and storage systems.

All SC-Networks IT systems are also protected against external attacks. These security measures are up to date thanks to regular audits. Internal company servers are installed in separate, secure server rooms. Only IT administrators have access to these rooms. Data on backup media is encrypted and the media are stored securely in a vault. Only management and IT administrators have access to the vault.

Operational reliability

We have defined comprehensive guidelines and instructions to ensure the secure operation of information and data processing facilities. Data backups are automatically generated daily and stored in AES‑256‑encrypted form on servers in the data center and in a vault in another building. It is essential to separate development, test, and production environments: Customer data and SC‑Networks GmbH’s own data are separated by access controls and by different server hardware. Malware detection, prevention, and recovery measures are regularly updated. In the event of an audit of our information systems, we have defined steps to minimize disruptions to business processes.

Device and value security

All assets (equipment, removable storage media, laptops) and information containing personal data are inventoried and maintained. Rules governing the acceptable use of our assets must be observed by all employees. We also have a documented process for transporting storage media to protect them from unauthorized access, misuse, or falsification. The storage media and data backup media we use are encrypted and stored securely. This also applies to storage media in production systems. We dispose of storage media no longer needed using formal procedures.

Reliability is no coincidence — it’s a promise

To protect our information and data, we regularly commission an independent review of our information security and data protection levels, policies, and our compliance with technical specifications.

Penetration tests

To assess potential vulnerabilities in the externally accessible IT infrastructure, we commissioned activemind AG to conduct an initial penetration test, followed by regular follow-up scans. The penetration test was based on the Open Source Security Testing Methodology Manual (OSSTMM), a widely adopted standard for security audits and penetration testing.

Security tests for web services

To ensure the integrity of the Evalanche API, SC‑Networks has established an automated testing procedure using an industry‑recognized test suite. Comprehensive security scans are run regularly. The control process ensures that the report is reviewed, alerts are analyzed immediately, and issues are remediated.

Your questions about security and data protection – our answers

Personal data is indispensable in marketing today. To understand how (potential) customers think, decide, and act, and to provide them with tailored, personalized content, companies need relevant information. However, user expectations and legal regulations in Germany and the EU – including the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Unfair Competition Act (UWG) – require compliance with specific guidelines for the collection, storage, processing, and use of personal data for advertising purposes. Otherwise, companies risk severe penalties, fines, and reputational damage – both for data-processing companies (e.g., software providers) and for contracting companies.