ACN QC1 qualification
for two new ATWS services

ACN accepts the applications: QC1 qualification awarded

By decision of 13 April 2026 (proceedings no. 6906 and 6907), the Italian National Cybersecurity Agency (ACN) has accepted the applications submitted by AtWorkStudio and awarded the QC1 level qualification to two SaaS services:

• ATWS Email Security Gateway — record SA-7582, SaaS gateway for email filtering and protection with antispam, antivirus and configurable policies.
• ATWS Secure Backup for Microsoft 365 — record SA-7583, SaaS backup and restore service for Exchange Online, SharePoint Online, OneDrive for Business and Microsoft Teams.

The QC1 qualification is valid for 36 months from the registration date of the decision. ACN reserves the right to carry out audits to verify that the requirements continue to be met, pursuant to art. 19 of Regulation no. 21007/2024.

What QC1 means and why it matters for the PA

QC1 is the SaaS qualification level defined by ACN for cloud services intended for the Italian Public Administration. A QC1 service is suitable for processing ordinary data of the PA and meets specific requirements on governance, security, EU data residency, incident management and business continuity.

The service is published in the national Cloud Catalogue managed by ACN, which is the reference point for Italian public administrations purchasing cloud services in compliance with decree-law no. 179/2012 and Regulation no. 21007/2024. For an administration that must comply, choosing an already qualified service drastically reduces procurement time and risk.

Three ATWS services qualified by ACN

With the acceptance of these two applications, AtWorkStudio now has three ACN-qualified services. The first one was ATWS Secure Workspace (record SA-7323), the SaaS cloud desktop already published in the national Cloud Catalogue.

All three services share the same design: EU infrastructure, tenant-side encryption, web console with MFA, centralised governance and compliance with ACN Regulation. They are delivered directly by AtWorkStudio on its own infrastructure, not resold.

Not resellers: we are the service provider

ACN qualification certifies the technical and organisational requirements of the service. But what makes the difference is who designs, delivers and governs it every day. ATWS ACN-qualified services are built on our own cloud infrastructure, managed by our team and covered by our ISO/IEC 27001, 27017, 27018 and ISO 9001 certifications.

This means a single party responsible for the entire stack: infrastructure, platform, service, operations and incident response. For a PA or a regulated company this matters: fewer chained delegations, less supply-chain risk, direct control over where data is stored and who manages it.

A local, certified and qualified partner

AtWorkStudio has been operating from Piacenza since 2000. We are certified ISO/IEC 27001, 27017, 27018 and ISO 9001, with three ACN-qualified services. We are members of Clusit (Italian Association for Information Security) and of Confindustria Piacenza in the RICT cluster.

The ACN QC1 qualification awarded to Email Security Gateway and Secure Backup for Microsoft 365 is a consistent step in our direction: to deliver compliant, governable cloud services with data in the EU, to PAs and companies that need security to be demonstrable, not just declared.