All documents at a glance
The AEB Trust Center contains all important information covering the topics of compliance, data protection, quality management, data centers, security, environment, and certificates at AEB. All documents linked in the Trust Center can also be found here on this page.
Compliance
Values at AEB
Common Ground
Last update: 18.04.2023
Compliance guidelines
Anti-Corruption Guideline
Last update: 02.01.2020In the Anti-Corruption Guideline, we define behavioral requirements, responsibilities, organizational measures and procedures to prevent corruption and related acts.In the Anti-Corruption Guideline, we define behavioral requirements, responsibilities, organizational measures and procedures to prevent corruption and related acts.Code of Conduct
Last update: 02.01.2024The Code of Conduct is part of AEB's corporate culture. This Code of Conduct is a guideline for the entire company and applies equally to everyone. We expect the same from our suppliers and customers and require that their own corporate culture reflects the principles of environmental, social, and ethical conduct.The Code of Conduct is part of AEB's corporate culture. This Code of Conduct is a guideline for the entire company and applies equally to everyone. We expect the same from our suppliers and customers and require that their own corporate culture reflects the principles of environmental, social, and ethical conduct.
Certificates: Compliance
Certificate: ISO/IEC 27001:2022
Last update: 13.10.2024The certificate attests that AEB has implemented and maintains an information security management system in accordance with ISO/IEC 27001:2022.The certificate attests that AEB has implemented and maintains an information security management system in accordance with ISO/IEC 27001:2022.Certificate: AEO-S
Last update: 05.03.2010AEB is awarded AEO Security certification (AEO S) based on the security amendments of the Community Customs Code (Regulation (EC) 648/2005). The certificate was reviewed again in 2018.AEB is awarded AEO Security certification (AEO S) based on the security amendments of the Community Customs Code (Regulation (EC) 648/2005). The certificate was reviewed again in 2018.Certificate: Software hosted in Germany
Last update: 01.01.2023The "Software hosted in Germany" quality seal from the German Association of IT SMEs (BITMi) certifies that data and software of AEB products are hosted in Germany and do not leave Germany.The "Software hosted in Germany" quality seal from the German Association of IT SMEs (BITMi) certifies that data and software of AEB products are hosted in Germany and do not leave Germany.
Data protection
Data protection documents
AEB SE Data Protection Statement
The Data Protection Statement informs as to how AEB handles your personal data.The Data Protection Statement informs as to how AEB handles your personal data.Data protection, Data Processing Agreement (DPA)
Learn all about how AEB protects your dataLearn all about how AEB protects your dataData Protection Guideline
Last update: 31.01.2022The primary aim of this guideline is to ensure proper application of relevant data protection laws such as the EU’s General Data Protection Regulation (GDPR) and national legislation.The primary aim of this guideline is to ensure proper application of relevant data protection laws such as the EU’s General Data Protection Regulation (GDPR) and national legislation.
Data security at AEB
Security Concept
Last update: 20.10.2024The security concept provides information about the technical and organizational measures taken to ensure appropriate security of data and services. Here you will also find AEB's statements on the controls of ISO 27001 (Annex A / Statement of Applicability (SOA)).The security concept provides information about the technical and organizational measures taken to ensure appropriate security of data and services. Here you will also find AEB's statements on the controls of ISO 27001 (Annex A / Statement of Applicability (SOA)).
Data protection – global regulations
Notice on 2021 version
Last update: 27.06.2022Here, AEB comments on developments in data protection law in the area of global data protection. AEB has wholly owned subsidiaries in Switzerland, the UK, and Singapore. Switzerland and the UK are covered by an EU adequacy decision in line with EU data protection requirements. Based on the new regulations for non-EU countries, it is now possible to conclude Standard Contractual Clauses (SCC) between processors and sub-processors. AEB SE has promptly concluded an SCC with AEB in Singapore under this regulation in 2021. We do not see a need for further action.Here, AEB comments on developments in data protection law in the area of global data protection. AEB has wholly owned subsidiaries in Switzerland, the UK, and Singapore. Switzerland and the UK are covered by an EU adequacy decision in line with EU data protection requirements. Based on the new regulations for non-EU countries, it is now possible to conclude Standard Contractual Clauses (SCC) between processors and sub-processors. AEB SE has promptly concluded an SCC with AEB in Singapore under this regulation in 2021. We do not see a need for further action.Standard Contractual Clauses AEB
Last update: 02.09.2021The transfer of personal data to non-EU countries is subject to Chapter 5 of the General Data Protection Regulation (GDPR). The use of Standard Contractual Clauses (SCC) offers one possible safeguard pursuant to Art. 46 GDPR. The document “AEB Standard Contractual Clauses” includes the agreement between AEB SE with headquarters in Germany/EU and AEB (Asia Pacific) with headquarters in Singapore. This is based on the SCC version 2021/914 and draws on MODULE THREE, “Transfer Processor to Processor.”The transfer of personal data to non-EU countries is subject to Chapter 5 of the General Data Protection Regulation (GDPR). The use of Standard Contractual Clauses (SCC) offers one possible safeguard pursuant to Art. 46 GDPR. The document “AEB Standard Contractual Clauses” includes the agreement between AEB SE with headquarters in Germany/EU and AEB (Asia Pacific) with headquarters in Singapore. This is based on the SCC version 2021/914 and draws on MODULE THREE, “Transfer Processor to Processor.”Transfer Impact Assessment (TIA)
Last update: 22.04.2024In addition to the Standard Contractual Clauses (SCC), AEB performs a Transfer Impact Assessment (TIA) for the business relationship between AEB SE and AEB (Asia Pacific) Pte Ltd. In the TIA, AEB provides information on the mandatory controls resulting from the SCC, for which AEB carries out risk assessments with AEB's subsidiary in Singapore.In addition to the Standard Contractual Clauses (SCC), AEB performs a Transfer Impact Assessment (TIA) for the business relationship between AEB SE and AEB (Asia Pacific) Pte Ltd. In the TIA, AEB provides information on the mandatory controls resulting from the SCC, for which AEB carries out risk assessments with AEB's subsidiary in Singapore.
Other supporting materials
Deletion Concept
Last update: 28.08.2024The document "Deletion concept of AEB" is part of the deletion concept that AEB maintains in its role as “processor” according to the EU’s General Data Protection Regulation (GDPR) and provides it to its customers in their role as “controllers”. It contains the information necessary for the customer on the subject of data deletion.The document "Deletion concept of AEB" is part of the deletion concept that AEB maintains in its role as “processor” according to the EU’s General Data Protection Regulation (GDPR) and provides it to its customers in their role as “controllers”. It contains the information necessary for the customer on the subject of data deletion.Joint Controller Agreement pursuant to Art. 26 GDPR
Last update: 26.04.2024The AEB Joint Controller Agreement provides information on the rights and obligations of data controllers when jointly processing personal data.The AEB Joint Controller Agreement provides information on the rights and obligations of data controllers when jointly processing personal data.Overview subcontractors
Last update: 26.11.2024The document "Overview subcontractors" provides an overview of current subcontractors for data processing as defined by Art. 28 GDPR. AEB keeps a record of current subcontractors and will duly notify customers of any changes, with reference to this document.The document "Overview subcontractors" provides an overview of current subcontractors for data processing as defined by Art. 28 GDPR. AEB keeps a record of current subcontractors and will duly notify customers of any changes, with reference to this document.Record of data processing activities
Last update: 06.03.2024The document "Record of data processing activities" covers the information that AEB, in its role as processor, is obligated to provide to its regulatory authority. This document shall provide further support to assist you, if necessary, in fulfilling your requirement to inform your data subjects accordingly.The document "Record of data processing activities" covers the information that AEB, in its role as processor, is obligated to provide to its regulatory authority. This document shall provide further support to assist you, if necessary, in fulfilling your requirement to inform your data subjects accordingly.
Certificates: Data protection
Certificate: ISO/IEC 27018:2024
Last update: 13.10.2024DEKRA confirms AEB's successful integration of ISO 27018 (data protection in the cloud) into its ISMS.DEKRA confirms AEB's successful integration of ISO 27018 (data protection in the cloud) into its ISMS.
General Terms & Conditions
General Terms and Conditions AEB SE
Last update: 01.04.2020The General Terms and Conditions format provide the legal framework for the cooperation between companies, legal entities governed by public law, or special funds governed by public law and all the companies of the AEB Group; they apply to all IT-related services between the contract parties.The General Terms and Conditions format provide the legal framework for the cooperation between companies, legal entities governed by public law, or special funds governed by public law and all the companies of the AEB Group; they apply to all IT-related services between the contract parties.
General Terms and Conditions AEB (International) Ltd. (UK only)
Last update: 01.08.2020The General Terms and Conditions provide the legal framework for the cooperation between companies, legal entities governed by public law, or special funds governed by public law and all the companies of the AEB Group; they apply to all IT-related services between the contract parties.The General Terms and Conditions provide the legal framework for the cooperation between companies, legal entities governed by public law, or special funds governed by public law and all the companies of the AEB Group; they apply to all IT-related services between the contract parties.
Additional Terms and Conditions: AEB Customs Broker Services
Last update: 15.10.2021The Additional Terms & Conditions AEB Customs Broker Services in PDF format provide the legal framework for AEB customers using AEB’s Customs Broker Integration software and corresponding customs broker services and for AEB partner brokers providing customs services to AEB customers.The Additional Terms & Conditions AEB Customs Broker Services in PDF format provide the legal framework for AEB customers using AEB’s Customs Broker Integration software and corresponding customs broker services and for AEB partner brokers providing customs services to AEB customers.
Quality management
AEB Guideline (company handbook)
Last update: 02.11.2020AEB's Company Handbook contains information on organizational principles, basics of working, leadership and management, and management systems at AEB.AEB's Company Handbook contains information on organizational principles, basics of working, leadership and management, and management systems at AEB.Integrated Management System Guideline
Last update: 30.08.2024This guideline describes guiding principles as well as organizational principles of the management systems for quality and information security established in the company.This guideline describes guiding principles as well as organizational principles of the management systems for quality and information security established in the company.Product Development Guide (Standard Product Development)
Last update: 01.02.2023In this guide, learn more about the principles that guide us in software product development and the tools we use. Furthermore, get to know our standard development process.In this guide, learn more about the principles that guide us in software product development and the tools we use. Furthermore, get to know our standard development process.Quality Management Guideline
Last update: 01.02.2021This guideline addresses the scope and implementation of quality management in the company as well as its regular review, e.g. in the form of audits.This guideline addresses the scope and implementation of quality management in the company as well as its regular review, e.g. in the form of audits.
Certificates: Quality management
Report IDW PS 951
Last update: 07.05.2024Since 2019: The standard according to IDW PS 951 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.Since 2019: The standard according to IDW PS 951 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.Report ISAE 3402
Last update: 07.05.2024Since 2019: The standard according to ISAE 3402 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.Since 2019: The standard according to ISAE 3402 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.
Data centers
Security in the data center
Excerpt from the AEB Security Concept: Details on the backup strategy
Last update: 01.04.2021This document describes data backup measures AEB takes to enable data recovery.This document describes data backup measures AEB takes to enable data recovery.
Green data center
Environment: Learn what AEB is doing to promote sustainability.
We also take our responsibility to the environment seriously. Here you’ll learn what AEB SE is doing to promote sustainability.We also take our responsibility to the environment seriously. Here you’ll learn what AEB SE is doing to promote sustainability.
Cloud models
Service description of the AEB Cloud
Last update: 23.06.2023This service description provides an overview of scope of services of the AEB Cloud.This service description provides an overview of scope of services of the AEB Cloud.Service description of the AEB Private Cloud
Last update: 23.06.2023This service description provides an overview of the scope of services of the AEB Private Cloud.This service description provides an overview of the scope of services of the AEB Private Cloud.Cloud scope: Services of the AEB Cloud models
Last update: 23.06.2023This document provides an overview of which services are included in different AEB Cloud models and which are optionally available.This document provides an overview of which services are included in different AEB Cloud models and which are optionally available.
Security
Basic information
Security Concept
Last update: 20.10.2024The security concept provides information about the technical and organizational measures taken to ensure appropriate security of data and services. Here you will also find AEB's statements on the controls of ISO 27001 (Annex A / Statement of Applicability (SOA)).The security concept provides information about the technical and organizational measures taken to ensure appropriate security of data and services. Here you will also find AEB's statements on the controls of ISO 27001 (Annex A / Statement of Applicability (SOA)).Integrated Management System Guideline
Last update: 30.08.2024This guideline describes guiding principles as well as organizational principles of the management systems for quality and information security established in the company.This guideline describes guiding principles as well as organizational principles of the management systems for quality and information security established in the company.Business Continuity Policy
Last update: 01.06.2019The AEB Business Continuity Policy describes the specifications and the scope for implementing continuous operation at the top level.The AEB Business Continuity Policy describes the specifications and the scope for implementing continuous operation at the top level.
Details of the security concept
Excerpt from the AEB Security Concept: Details on access and access control
Last update: 31.10.2024This document provides an overview of access to areas in the AEB building, as well as access to and use of AEB applications.This document provides an overview of access to areas in the AEB building, as well as access to and use of AEB applications.Excerpt from the AEB Security Concept: Details on the backup strategy
Last update: 01.04.2021This document describes data backup measures AEB takes to enable data recovery.This document describes data backup measures AEB takes to enable data recovery.Excerpt from the AEB Security Concept: Details on the handling of data in general
Last update: 08.12.2023The security concept provides information about the technical and organizational measures taken to ensure appropriate security of data and services. Here you will also find AEB's statements on the controls of ISO 27001 (Annex A / Statement of Applicability (SOA)).The security concept provides information about the technical and organizational measures taken to ensure appropriate security of data and services. Here you will also find AEB's statements on the controls of ISO 27001 (Annex A / Statement of Applicability (SOA)).Excerpt from the AEB Security Concept: Security event and incident management
Last update: 01.11.2024This document provides an overview of security event management and security incident management.This document provides an overview of security event management and security incident management.Excerpt from the AEB Security Concept: Security vulnerability management
Last update: 01.11.2024This document provides an overview of the security concept vulnerability management.This document provides an overview of the security concept vulnerability management.
Certificates: Security
Certificate: AEO-S
Last update: 05.03.2010AEB is awarded AEO Security certification (AEO S) based on the security amendments of the Community Customs Code (Regulation (EC) 648/2005). The certificate was reviewed again in 2018.AEB is awarded AEO Security certification (AEO S) based on the security amendments of the Community Customs Code (Regulation (EC) 648/2005). The certificate was reviewed again in 2018.Certificate: ISO/IEC 27001:2022
Last update: 13.10.2024The certificate attests that AEB has implemented and maintains an information security management system in accordance with ISO/IEC 27001:2022.The certificate attests that AEB has implemented and maintains an information security management system in accordance with ISO/IEC 27001:2022.Report IDW PS 951
Last update: 07.05.2024Since 2019: The standard according to IDW PS 951 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.Since 2019: The standard according to IDW PS 951 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.Report ISAE 3402
Last update: 07.05.2024Since 2019: The standard according to ISAE 3402 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.Since 2019: The standard according to ISAE 3402 has been successfully audited by HKKG GmbH Wirtschaftsprüfungsgesellschaft.
Service & Support
General Terms and Conditions Support and Services
Last update: 01.04.2021The “General Terms and Conditions for Support and Service” document gives an overview of the services that AEB provides to customers in the event of a disruption of the service or a malfunction of the software to enable a solution.The “General Terms and Conditions for Support and Service” document gives an overview of the services that AEB provides to customers in the event of a disruption of the service or a malfunction of the software to enable a solution.
