Statement on Information Security and Cybersecurity Measures

UMCO GmbH
Georg-Wilhelm-Straße 187
21107 Hamburg, Germany

Version date: 5 October 2026

UMCO GmbH provides services in the fields of chemical compliance, health, safety and environment (HSE), and dangerous goods, as well as software-based solutions for the preparation and management of safety data sheets (SDSs) and their underlying data.

Based on its current assessment, UMCO GmbH does not fall directly within the scope of the NIS2 Directive or the applicable national implementing legislation. Notwithstanding this assessment, UMCO GmbH has implemented appropriate technical and organisational measures designed to safeguard the confidentiality, integrity and availability of the information it processes and the systems it operates to the greatest extent possible.

The information security measures are regularly reviewed, continuously improved and adapted to applicable statutory and regulatory requirements. Changes take effect upon publication of the updated standard on the UMCO GmbH website. Material changes are excluded from this provision and will be communicated separately to the relevant contractual partners.

UMCO GmbH has implemented, among others, the following organisational and technical security measures, which are subject to continuous review and improvement:

Governance and Organisation

• Defined responsibilities for information security and IT operations
• Documented information security policies and operating procedures
• Regular employee awareness training on information security and data protection
• Established procedures for user account management, including employee onboarding and offboarding
• Procedures for handling information security incidents and IT disruptions
• Regular review and continuous improvement of information security measures

Identity and Access Management

• Centralised user account management
• Multi-factor authentication (MFA) for relevant systems
• Role-based access and authorisation concepts based on the need-to-know principle
• Individually assigned administrative accounts
• Regular reviews of user access rights and permissions

Technical Security

• Up-to-date endpoint protection solutions
• Segmented network architecture
• Regular security updates and patch management
• Encryption of mobile devices
• Secure remote access

Data Backup and Availability

• Multi-layered data backup strategy
• Physically segregated backups
• Regular verification of data recoverability
• Documented emergency response and IT recovery procedures

Supplier Management

• Identification of critical service providers
• Information security assessments of key service providers
• Consideration of information security requirements when selecting and managing external service providers

UMCO GmbH regularly commissions independent analyses and assessments of its information security measures. The findings of these assessments are incorporated into the continuous improvement of its technical and organisational security measures.

UMCO GmbH has established organisational and technical measures designed to protect information, systems and processes. These measures are subject to ongoing review, adapted to current requirements and continuously enhanced in accordance with a risk-based approach.

For enquiries relating to information security, please contact: 

This statement does not constitute a certification, an official confirmation by a competent authority, or a legally binding declaration of full compliance with applicable statutory or regulatory requirements, including, in particular, the NIS2 Directive and the relevant national implementing legislation.

This statement is provided solely for the purpose of describing, in general terms, the technical and organisational information security measures implemented by UMCO GmbH.

UMCO GmbH regularly reviews and continuously enhances its information security measures, taking into account the evolving cybersecurity threat landscape, technological developments, customer-specific requirements and applicable regulatory requirements.

UMCO GmbH

Anika Biehl
Managing Director