The C5 catalogue (Cloud Computing Compliance Criteria Catalogue) defines the security requirements a cloud service must meet: from the physical protection of data centers through access control and data backup to current topics such as supply chain security and encryption. Since its introduction in 2016, C5 has become the leading reference framework for cloud security in Germany and is also aligned with the upcoming European certification scheme (EUCS).
One special feature of the standard: C5 is not a self-assessment. The attestation is carried out by an independent auditing firm that examines against a clearly defined, recognized benchmark and documents the result in a transparent report.
We believe security should not just be promised but proven. That is exactly what the C5 attestation delivers. We do not assess our own security ourselves. Instead, neutral third parties confirm it against a recognized standard.
For customers, this results in three key benefits:
- Reliability, because the security measures behind DTS Identity & DTS Cockpit are externally confirmed instead of merely claimed
- Comparability, because C5 creates a uniform standard against which DTS & other providers can be measured
- Confidence in choosing a provider, because in many industries & in the public sector, C5 attestation has long been considered a basic requirement for trustworthy cloud services
With the C5 Type 1 attestation of DTS Identity and DTS Cockpit, we are firmly committed to independently verified cloud security as a reliable foundation for working with customers and partners.