Skip to content

Security & certifications

Data security is not an extra.It is the foundation.

Fleet data is company data: who drives, where they go, what it costs to run. That is why, for us, security is not a setting but the foundation of everything we do – from development to day-to-day support, verified by independent organisations.

Our certificationsOur quality policy

Layers of protection

Three layers,
one goal.

Tabula’s security is built on three levels: who can access what, who runs the system, and the rules we follow when handling data.

01

Access.

Everyone can access exactly what their role permits. What is not theirs never even appears.

Role-based viewsBy permission level
02

Operations.

Running, updating and monitoring the system is Macrofleet’s job, not your company’s IT team’s.

No installationContinuous monitoringBackups several times a day
03

Data handling.

The company is the controller of the data recorded in Tabula; we act as its processor. Which data we process, for what purpose and for how long is set out in the data processing agreement we sign with the company.

EU data centreNot transferred outside the EU

Responsibility

Shared responsibility.

Security depends on both sides. This is how we divide the tasks.

MacrofleetYour company
The platform
Running and updating Tabula
Operating role-based access control
Monitoring the system and fixing faults
Support with security questions
The users
Creating and removing users
Assigning roles with care
Protecting login credentials
Responsibility for the content of recorded data

Certifications

Verifiable,
not just claimed.

Quality management, information security and financial reliability. Confirmed by independent organisations and verifiable by anyone.

9001ISO 9001:2015 · Quality managementPredictable collaboration.
27001ISO/IEC 27001:2022 · Information securityYour data, in a protected environment.
RatingInternational financial ratingTrust for the long term.
View ISO certifications (external site: IAF CertSearch, opens in a new tab)
ISO 9001:2015 · Quality management

Predictable collaboration.

From implementation to day-to-day support, we work to documented processes. It is clear in advance what comes next, who is responsible and what happens if something does not go to plan.

  • Implementation to planAgreed steps, with named owners and handover points.
  • Trackable requestsEvery request is logged and tracked until it is closed.
  • Continual improvementFeedback is systematically built into the service.
ISO/IEC 27001:2022 · Information security

Your data, in a protected environment.

Our information security management system follows the latest edition of the standard and covers both Tabula and our services.

  • In TabulaRole-based access, data kept separate for each company, encrypted connections and logged access.
  • In our servicesOur staff access data only with authorisation and under confidentiality; data uploads, document management and support follow controlled processes.
  • Risk managementWe assess risks regularly, review our controls and handle any incidents through a documented procedure.
International financial rating

Trust for the long term.

Our financial stability and business reliability are assessed regularly by an independent international financial rating organisation, using a uniform international methodology. We share the rating on request – so that our partners, suppliers and employees can also be confident that they can plan with us for the long term.

Accreditation

What makes a
certification credible?

Behind a certification is a real, formal audit, and its result can be publicly verified.

1StandardInternational requirements

ISO standards define what a management system has to achieve.

2Certification bodyExternal audit

An independent certification body examines how we work, with audits repeated every year.

3Accreditation bodyOversight

The certification body’s work is overseen by a national accreditation body.

4RegisterPublic verification

A valid certificate can be viewed by anyone in an international public database.

For procurement and IT

For supplier selection.

What you need to select and assess a supplier.

Security questionnaire

We complete procurement and IT security questionnaires and answer your questions.

Get in touch
Quality & information security

Our quality and information security principles in one document.

Read the document
Report an issue

If you notice a security problem, write to us and we will deal with it immediately.

FAQ

Questions?
Answers.

Ask us
What does the information security certification cover?

The development and operation of Tabula, and our related services: handling company data, support and document management.

Where can the certifications be verified?

In IAF CertSearch, the international public database, by searching for Macrofleet. It shows whether each certificate is valid and which certification body issued it.

How does Tabula protect company data?

Each company’s data is stored in a separate database, isolated from other companies. Inside the system, access is role-based, and Macrofleet takes care of operation, updates and monitoring.

Who decides who sees what in the system?

Your company’s fleet manager admin. They create the users and assign their roles, which determine the modules and actions available to them.

Who is the controller of the data recorded in Tabula?

The company using Tabula. Macrofleet acts as processor under the data processing agreement signed with the company. Data processing related to this website is described in the Privacy notice.