Statut des certifications
Ce pour quoi ShelfTap est certifié — et surtout ce pour quoi il ne l'est pas.
Ces politiques sont publiées en anglais. Le texte anglais fait foi ; les traductions sont fournies à titre indicatif.
Dernière mise à jour: 2026-08-01
Les informations d'immatriculation de la société exploitant ce service ne sont pas encore publiées. Elles apparaîtront ici et dans le pied de page dès leur confirmation.
What we hold
Nothing. ShelfTap holds no information-security or privacy certification.
Stated plainly
- ISO/IEC 27001: not certified. No certification, no audit in progress, and none currently planned.
- SOC 2 (Type I or Type II): not attested. No report exists, no audit is under way, and none is currently planned.
- ISO/IEC 27701, PCI DSS, HIPAA, FedRAMP, Cyber Essentials: none of these apply to us and none are held.
- No independent penetration test has been commissioned or published.
If a procurement questionnaire asks for any of the above, the answer is no. We would rather lose the deal than imply a certification we do not have. If certification becomes a requirement for your organisation, tell us at support@shelftap.com — we will say honestly whether and when we could pursue it, and we will not put a date on this page until an auditor is engaged.
What we offer instead
In place of a certificate we publish the underlying detail, so it can be assessed directly:
- The Aperçu de la sécurité page lists every control that is actually implemented — and a "what we do not claim" section listing the gaps.
- The Conservation des données page publishes the exact retention windows compiled into the service, plus the known limitation of the purge job.
- The Sous-traitants ultérieurs page names every third party and what each receives.
- The Réponse aux incidents page states our breach-notification window.
- The Accord de traitement des données is available for signature.
Ranking neutrality
A related commitment, since it is the other thing buyers ask us to certify: no payment of any kind affects the ranking of buyer search results. The result ordering is computed from an evidence-based ranking score and a contact-quality score only; no billing, verification or promotion field is read anywhere in that path. Paid verification and promotion apply solely to the separate supplier directory, where promoted entries are ordered above unverified ones. The two surfaces are kept apart deliberately.