← About
Trust & Security
The facts a security or procurement review needs first, stated precisely. Everything on this page is verified; where something usual for a page like this is not yet published, it says so rather than approximating.
Certification
- ISO/IEC 27001:2022
- Certified. Transition from the 2013 standard announced 21 August 2025.
- ISO/IEC 27001:2013
- First certified May 2022 (announced 20 May 2022); superseded by the 2022 transition above.
Entity and footprint
- Legal entity
- Windmill Smart Solutions AG
- Headquarters
- Switzerland
- Offices
- Europe, the United States and India
How client data is handled in delivery
The engineering detail - Swiss data sovereignty, private-endpoint isolation of AI infrastructure, and the standing rule that client data is never used for model training - is maintained on the trust and information security page, alongside how quality gates hold in production.
Not yet published here
- — The sub-processor list.
- — Downloadable security documentation.
- — A named individual for security questionnaires.
Until then, security questionnaires and due-diligence requests go to hello@windmill.digital and are routed to the accountable person.