Declare a service

Person Declaring the Service

For communications purposes and should any question arise in relation to your declaration, please include the information of the contact person in charge of the Declaration.

🧑‍💻 Name *

🏛️ Company *

💼 Function *

📨 Business Email *

☎️ Business Phone Number *

Please add country code

Type of Declaration

Please select *

Self-assessment process
Initial Controlled Adherence process
Updated Declaration of Adherence process

Your choice will determine which Compliance Mark the CISP is eligible to use for the Service(s).

For Self-Assessment, a CISP must complete a self-assessment of its service against the Code Requirements and present to the CISPE Secretariat:
• its Declaration of Adherence; and
• a completed Compliance Checklist as set out at Annex B of the Code, and any supporting information.¨

CISPs that follow the Self-Assessment process shall be entitled to have the self-assessed service into the CISPE Public Register as “Candidate to the Code”, for a maximum period of 12 months 📅 following the date of incorporation of the Declaration of Adherence into the CISPE Public Register.

For initial Controlled Adherence, a CISP must first submit the relevant service for Monitoring Body assessment and verification, and present to the Secretariat:
• its initial Declaration of Adherence; and
• a completed Compliance Checklist as set out at Annex B of the Code, and any supporting information; and
• written confirmation from its Monitoring Body that the CISP service adheres to the Code.

The purpose of the “Updated declaration of adherence” is to confirm the continued accuracy of the controlled adherence of services which compliance to the Code has already been successfully assessed by a Monitoring Body (“Initial Review”) and that have not been materially modified. If the service of the CISP has been materially modified, the CISP must restart a new “Initial Controlled Adherence” process.

The “Updated declaration of adherence” shall occur annually at the occasion of each of the 3 annual reviews to be performed by the Monitoring Body to assess the compliance of the services after the “Initial controlled of adherence”.

To complete the “Updated declaration of Controlled Adherence”, the CISP shall present to the CISPE Secretariat:
• the service decaration form dully completed;
• a written confirmation of the continued accuracy of the Declaration of Adherence, provided by the Monitoring Body following its annual review.

CISP(s) Information and Service(s) covered

Please complete and upload this 📝 “Services declaration form” (Excel template) to provide company information and details for all declared services.

This Declaration of adherence should be made by an entity which is a seller of record of the Service(s) (the “CISP”). If this Declaration of adherence is being made by more than one CISP, for example if the declaring entity provides services through different brand name or CISP subsidiaries, please include details for each CISP below and in the “Services declaration form”. This information will appear on the CISPE Public Register.

Bulk Service Upload *

Click or drag a file to this area to upload.

Please upload a .xlsx, .ods or .xls file following the provided example.

Proposed Monitoring Body

Please select the Monitoring Body used in this declaration.

Monitoring Body in charge of the Annual Review

Please select the Monitoring Body that carried out the annual review of your service(s) that is declared to be Code compliant.

Possible Monitoring Bodies *

Monitoring Body Confirmation

Please attach written confirmation from the Monitoring Body that the CISP service adheres to the Auditable Code Requirements. (Such confirmation should be signed by the relevant Monitoring Body.)

Upload files *

Click or drag a file to this area to upload.

Please provide your files in a single .zip file.

Written confirmation of the continued accuracy of the Declaration of Adherence

Please attach written confirmation from the Monitoring Body of the continued accuracy of the initial Declaration of Adherence and any supporting information provided on initial submission.

Upload files *

Click or drag a file to this area to upload.

Please provide a .pdf

Compliance Checklist

This Compliance Checklist sets out the requirements that a CISP shall meet in order to comply with the Code. It also provides suggested guidance to CISPs on how compliance with the Code Requirements can be achieved and technical and organisational security practices of Annex A can be implemented.

For clarity, the CISP’s obligation is to comply with the Code Requirements: the columns below setting out expected controls to be applied, and questions for the CISP, are to provide examples for how a CISP could comply and how their compliance could be assessed, but do not replace or change the relevant Code Requirement.

The Compliance Checklist is also intended to ensure a consistent verification approach for all Monitoring Bodies by providing them with (i) the requirements with which compliance with the Code will have to be verified and (ii) the questions/materials or equivalent that should be used to perform an assessment of Code compliance. The Compliance Checklist is not intended to replace or alter the Service Contract between a CISP and a customer.

For your convenience, the Compliance Checklist 📝 (“Annex B”) can be downloaded here, as an Excel document.

Please attach the Compliance Checklist and copies of any supporting documentation provided in respect of the Auditable Code Requirements.

Please indicate if supporting documents only apply to specific Services. If you are relying on different supporting documents for different services, you may complete the Compliance Checklist separately for each Service.

Upload files

Click or drag a file to this area to upload.

Please upload the completed checklist or a .zip file containing it and any supporting documents.

Business Number

Declaration of adherence

By signing below the CISP(s) confirms that:

as of the date of this Declaration of adherence, the Services adhere to the Code Requirements;
if following the Self-Adherent Process, the CISP shall submit the Service for Monitoring Body review within 12 months of incorporation of this Declaration in the CISPE Public Register;
the CISP shall comply with the Monitoring Body review, complaints and enforcement procedures in Section 7(Governance) of the Code; and
if any change to the Service(s) or the Code means a material update to this Declaration of adherence is required, then
1. the CISP must promptly notify the Secretariat, and
2. cooperate with the Secretariat to update those materials.

Name of person signing ✒️ the declaration *

💼 Title *

Non-Disclosure Agreement ( 'NDA' ) *

I have read and agree to the terms outlined in the NON-DISCLOSURE AGREEMENT (‘NDA’) between Cloud Infrastructure Services Providers in Europe ASBL (CISPE) and the Declaring Company (the “Parties”).