C5 Certification Rainbow

Rainbow meets the BSI framework requirements for information security, compliance, and data protection in Germany

Kornwestheim, Germany, January 29, 2026 – Alcatel-Lucent Enterprise, a leading European provider of secure network and communication solutions to increase operational efficiency and competitiveness, has received the C5* Type 1 attestation from the German Federal Office for Information Security (BSI) for Rainbow™ by Alcatel-Lucent Enterprise, its cloud platform for communication and collaboration. This formally confirms that Rainbow meets the BSI framework requirements for information security, compliance, and data protection.

Rainbow provides a digital platform for communication and relationships, which is easy to set up, and enables users to collaborate quickly and seamlessly - all with robust security. ALE prioritizes the security and integrity of user data. As a European provider, Alcatel-Lucent Enterprise meets very high standards for data sovereignty and security. This is demonstrated through numerous certifications and compliance achievements, which are now joined by the BSI's seal for cloud service security.

With this verification, ALE has taken an important step toward ensuring and validating secure cloud solutions in unified communications and collaboration (UCC). Rainbow now stands among the few C5-certified European cloud services for modern collaboration, encompassing chat, presence, file sharing, and video conferencing.

The C5 attestation establishes rigorous minimum standards for processing personal and health-related data through cloud services. While mandatory in the healthcare sector since the Digital Act (DigiG) took effect, C5 has become a widely recognized hallmark of secure cloud computing across industries.

The standards derive from the BSI's C5 catalogue. Information security must meet current best practices, which auditors verify during the validation process. The audit covers 17 areas of the security system, including communication and information security, physical security, and identity and authorization management. Auditors also evaluate organizational aspects such as security incident response, security policies and procedures, and overall information security management.

We are delighted to have received the C5 attestation for our cloud communication platform Rainbow. This was preceded by extensive audits by external auditors who confirmed that Rainbow meets all necessary requirements. For our customers, especially in critical infrastructure sectors, such as healthcare, this is a strong signal that they can trust Alcatel-Lucent Enterprise.

Martin Zingsheim, Sales Director Germany, Alcatel-Lucent Enterprise

Rainbow by Alcatel-Lucent Enterprise is compliant with Europe’s strictest security standards: Agenzia per la Cybersicurezza Nazionale (ACN) in Italy, Bundesamt für Sicherheit in der Informationstechnik (BSI) C5 in Germany, Esquema Nacional de Seguridad (ENS) in Spain and Certification de Sécurité de Premier Niveau (CSPN) issued by the ANSSI in France. This unique set of official recognitions reflects ALE’s constant commitment to high level cloud security, digital trust, compliance with standards and European technological sovereignty.