Procurement documentation
If Skytale is being considered for procurement or an internal security assessment, you will find most of the information here. If you need anything else, ask us and we will send it.
The supplier
Skytale AS, company registration number 930 599 824, St. Olavs Plass 3, 0165 Oslo, Norway. The company was established in 2022. The platform is developed by Norwegian developers and subcontractors.
Deployment model
Skytale is delivered as a service operated for your organisation or deployed on your own infrastructure. The choice depends on the requirements that apply to your organisation and how much control you need over operations.
No data is stored outside Norway. Data is processed under Norwegian law.
Subcontractors
A list of subcontractors, including names, countries and roles, is available on request.
Certification
Skytale is certified to ISO 9001:2015 for quality management. The certification covers the company's management system and working processes.
Request the certificate for details of the certification body, certificate number and validity period.
The Norwegian Security Act
The Norwegian Security Act applies to organisations and suppliers. Skytale supports your organisation's compliance with the Act.
One of Skytale's customers has received approval from the Norwegian National Security Authority for communication classified BEGRENSET under the Norwegian Security Act, with Skytale as the technical foundation. The approval covers the delivered application together with the cloud service provider. The customer's own use must be approved separately, and we guide the customer through that process.
The process is described on the approval page.
Privacy
Skytale acts as a processor for the content your organisation processes in the platform. A data processing agreement is entered into during onboarding, and a draft is available on request.
The privacy policy is on a separate page.
Cryptography
The platform is based on established, open and recognised standards and uses algorithms in line with the Norwegian National Security Authority's cryptographic recommendations. Content is end-to-end encrypted.
If your organisation needs details of protocols, libraries or algorithms for an assessment, we can review them in a separate discussion under a confidentiality agreement.
Vulnerabilities
Skytale accepts vulnerability reports at support@skytale.no. The procedure is on a separate page.
On request
Available on request
- Draft data processing agreement.
- List of subcontractors.
- ISO 9001 certificate.
- Description of deployment models and data storage for your own risk assessment.
Next step
Anything missing from your assessment
Tell us what your procurement or security team needs, and we will send it.