Security lead
Information security at Jinni S.r.l. and on the Kamzan platform is the responsibility of:
Roberto Negro – Board Member & Security Lead
Email: security@jinni.srl
The Security Lead is responsible for the security of infrastructure, applications and data, for vulnerability and security incident management, and for relations with infrastructure providers.
Personal data protection
Personal data processing and GDPR matters are handled by the Data Protection Officer (DPO), who works together with the Security Lead:
Arianna Crepaldi – Data Protection Officer (DPO)
Email: dpo@jinni.srl
More details in the Privacy Policy.
Infrastructure and data centers
The Skalenda platform is hosted in Italy, in the Opiquad data center. The Kamzan platform is also being migrated to the same data center: until the migration is complete, part of its services remains on the Hetzner servers described below. Opiquad states that it holds the following certifications and qualifications (full list on the Opiquad website):
- ISO/IEC 27001:2022, with the ISO/IEC 27017 and ISO/IEC 27018 extensions (information and cloud security)
- CSA STAR Level 2
- ISO 9001:2015 and ISO 14001:2015
- Gaia-X Label Level 3
- Qualification for the Cloud Marketplace of the Italian National Cybersecurity Agency (ACN) for IaaS and SaaS services
- CISPE Code of Conduct
Websites, including www.jinni.srl, are hosted on Hetzner Online servers in Germany, as stated in the Privacy Policy. Hetzner states that it holds (certifications and information security details on the Hetzner website):
- ISO/IEC 27001:2022, issued by SOCOTEC Certification, covering the infrastructure, operation and customer support of its Nuremberg, Falkenstein and Helsinki data centers
- BSI C5 Type 2 for its cloud services (criteria of the German Federal Office for Information Security, BSI)
- Classification as a critical infrastructure (KRITIS) operator in Germany, certified under §8a BSIG
- Technical and organizational measures regularly audited by TÜV Rheinland
These certifications belong to the data center providers, Opiquad and Hetzner, not to Jinni S.r.l.
Jinni certifications
Jinni S.r.l. holds ISO 9001:2015 certification for its quality management system, issued by Bureau Veritas (certificate no. IT351684, valid until 14 April 2029):
- ISO 9001:2015 certificate (PDF, Italian)
- Management system policy (PDF, Italian)
More details on the Certifications page.
We are working towards ISO/IEC 27001 (information security) and ISO/IEC 27017 (cloud services security) certification, which we expect to complete by the second quarter of 2027.
Reporting a vulnerability
If you find a vulnerability in our websites, on the Kamzan platform or in our services, write to security@jinni.srl with:
- what you found and where (URL, service, version);
- the steps to reproduce it;
- the impact you think it could have.
Please do not access, modify or delete other users’ data, do not degrade our services, and give us time to fix the issue before making it public. We acknowledge every report and keep you updated until the fix. We do not run a reward (bug bounty) program.
The same contacts are published in the standard format (RFC 9116) at /.well-known/security.txt.
