Trust · Security
Certified security for your transport documents
BlueCMR protects the information, access and evidence of every document throughout its lifecycle, with an information security system certified under Spain's National Security Framework (ENS).
- ENS certification
- Data in the European Union
- Two-factor authentication
ENS
National Security Framework (ENS) certification
BLUECMR, S.L.U. holds a management system certified under Royal Decree 311/2022 (ENS) by OCA CERT.
Infrastructure
An architecture with a small attack surface
AWS, in the EU
The whole platform runs on Amazon Web Services, with managed and audited services, and data hosted in the European Union.
No exposed servers
Logic runs on AWS Lambda: ephemeral environments destroyed after each use, each function with limited permissions.
Isolated environments
Separate test and production, and isolation between data, logic and credentials.
Activity logging
Relevant access and actions are logged, security events analysed and incidents investigated in a controlled way.
Protection
Keys and access under control
Encryption and keys
Data is encrypted in transit and at rest.
- Keys managed in AWS Key Management Service (KMS)
- Never directly accessible to users
- Key use controlled, rotated and audited
- Signature biometrics encrypted on the device itself
Access and authentication
Each person sees only what they should.
- User authentication with AWS Cognito
- Two-factor with Google or Microsoft Authenticator
- Single sign-on with Microsoft Entra ID
- Least-privilege permissions per user, role and site
- Sessions that expire automatically
Shared responsibility
What BlueCMR protects and what each customer protects
BlueCMR
- Protect the infrastructure and the platform
- Apply technical and organisational controls
- Guarantee the integrity and availability of the service
Each customer
- Protect their credentials
- Use strong authentication
- Manage access within their organisation
Customers, suppliers and other stakeholders can request more information about our security framework at contact@bluecmr.com. Detailed internal documentation (policies, rules and procedures) is provided under the corresponding confidentiality agreements.
We answer your security team's questions
We will show you the platform and provide the documentation you need, with no commitment.