Topics covered in this white paper: the measures Archive-IT takes with regard to physical and digital information security, ISO certificates, GDPR, awareness, the Data Protection Officer, more about Archive-IT and a number of references sharing their experiences.