TÜV Saarland Certification certifies coronavirus tracing app

Data protection and data security in pandemic management
Presentation of certificates in Frankfurt am Main, from left: Project Manager Alexander Wolf, Division Manager Data Protection & IT Security TÜV Saarland Certification | Thorsten Greiner, Managing Director TÜV Saarland Certification | Prof. Dr. Rainer Bernnat, Managing Director PwC strategy& Germany
Digital contact tracing is one of the key functions of pandemic management. Data protection and data security are crucial – TÜV Saarland tested and certified our coronavirus tracing app Zone Check in a highly professional way.
Prof. Rainer Bernnat, Managing Director, PwC strategy& (Germany) GmbH

In contrast to the “state coronavirus app”, Zone Check is adapted to the specific needs of companies. The app provides a digital management platform for effective crisis management, including anonymous decentralised contact tracing function to break infection chains.

We are pleased to be able to contribute to the management of the coronavirus pandemic with the certification of the PwC app.
Thorsten Greiner, Managing Director TÜV Saarland Certification GmbH

What was tested?

As part of the certification of the coronavirus tracing app, tests were carried out by TÜV Saarland in the following areas:

  • Checking the app’s data processing and data protection provisions with regard to conformity with the GDPR and BDSG
  • Checking legal conformity with the regulations of the German Telemedia Act (TMG) and the German Civil Code (BGB)
  • Testing the app’s functions and performance
  • Testing IT security (based on the criteria of ISO/IEC 27001) both within the app and with regard to the background IT systems;
  • Pen test with regard to critical security vulnerabilities in iOS and Android;

the checks and tests ensure compliance with legal requirements, such as the GDPR, and with the supervisory authorities’ requirements. As well as achieving a higher standard of security and making the app more intuitive for the user.