Digital

Testo SE & Co KGaA operates an information security management system in accordance with ISO27001:2022. Certification is targeted for 2026. We fully comply with the EU's NIS-2 Directive and its implementation in Germany.

For more details, please refer to these documents:

The European Data Act (EU) 2023/2854 requires specific characteristics and documentation for every connected product and associated service. For most products that can be ordered, this can be found in the download area of the respective product website. For our cloud products, the required documentation can be accessed on the respective login page.

• Saveris Food: www.food.saveris.net

• Testo Saveris: saveris.testo.com

In accordance with the NIS-2 guideline and other product-specific regulations, known security vulnerabilities of our products are published here. Naming the vulnerabilities is intended to enable the affected customer to carry out a risk assessment, but not to provide a potential attacker with details on how to exploit the vulnerability. Of course, we provide security updates in good time and support customers with further information or support if necessary.

Report security vulnerabilities

If you have identified a security vulnerability in one of our products or web services, or even if you have a reasonable suspicion, please write to security@testo.de. We will then contact you immediately and follow up on every report. We are guided by the CVD guideline of the BSI in our processing. (Attention: There is no bug bounty program.)
 

Information security in the supply chain

If you are a customer and would like to evaluate our information security, please send your questionnaire or similar to us via your Testo partner.

There is an information security questionnaire for our suppliers of digital products: