GarboProduct site

Regulatory Compliance and Certifications

"The price of reliability is the pursuit of the utmost simplicity." - Charles Eames


Garbo operates under standards for information management and data protection. We hold the Spanish National Security Framework (Esquema Nacional de Seguridad - ENS) certification at its highest level (Categoría ALTA). For those unfamiliar with this standard or based outside of Spain, the ENS is a strict legal framework established by the Spanish government that defines the mandatory security controls for public administrations and their technology providers. Achieving the "High" (ALTA) category certifies that Garbo implements maximum security measures to guarantee the confidentiality, integrity, traceability, authenticity, and availability of all data it handles.

Furthermore, although other formal certifications are currently in progress, both our corporate governance and our technology are already designed in alignment with internationally recognized frameworks such as ISO 27001 and the EU NIS2 Directive. Our objective is to ensure that every component of the platform meets the security and reliability criteria required by these standards.

At the organizational level, Logicode applies internal management and quality processes consistent with the principles of ISO 9001, ensuring traceability, procedural consistency, and continuous improvement across all operations.

From an infrastructure standpoint, Garbo’s cloud systems are configured in accordance with Google Cloud’s EU compliance framework, guaranteeing that all data is processed and retained exclusively within the European Economic Area (EEA). Our deployment includes proactive alert policies with compliance monitoring and data retention management aligned with Google Cloud’s Security and Data Protection standards.

Garbo’s corporate compliance framework is designed to evolve continuously as the platform grows. The company will incorporate external audits, structured security assessments and incident response exercises as part of its long-term governance model.