# Attested: all evidence (vendor | certification | level | state | scope | source | captured | url) # From public trust centers and registries on the date shown. Confirm scope with the vendor. AI21 Labs | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.ai21.com/ AI21 Labs | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://trust.ai21.com/ AI21 Labs | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://trust.ai21.com/ AI21 Labs | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.ai21.com/ AI21 Labs | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.ai21.com/ Akamai | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Akamai Technologies, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5353 Akamai | FedRAMP | Moderate | active | Content Delivery Services | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1206061353 Akamai | FedRAMP | High | ready | Akamai Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2535161278 Alibaba Cloud | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | COPPA | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/alibaba-cloud-computing-ltd Alibaba Cloud | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Covered entity of Alibaba Cloud US L | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6580 Alibaba Cloud | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | FERPA | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | FISC (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | HECVAT | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO/IEC 20000-1 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO 27799 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | K-ISMS (Korea) | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | MTCS (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | NIST SP 800-53 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | PCI 3DS | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Alibaba Cloud | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.alibabacloud.com/en/trust-center/compliance Anthropic | Cyber Essentials (UK) | Basic | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | DoD Impact Level | IL5 | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | HECVAT | | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | ISO/IEC 42001 | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/anthropic Anthropic | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | NIST SP 800-171 | | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Anthropic | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://trust.anthropic.com/ Asana | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/asana-inc Asana | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Asana | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6372 Asana | FedRAMP | Moderate | active | Asana | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2527132001 Asana | FERPA | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | GLBA | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Asana | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://asana.com/trust Atlassian | APRA CPS 234 | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/atlassian Atlassian | DORA | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Atlassian, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5341 Atlassian | FedRAMP | Moderate | active | Atlassian Government Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2412062433 Atlassian | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | HECVAT | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | MAS TRM (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | GovRAMP (StateRAMP) | Moderate | active | Atlassian Government Cloud (Authorized, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Atlassian | GovRAMP (StateRAMP) | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources Atlassian | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.atlassian.com/trust/compliance/resources AWS | CJIS | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | CMMC 2.0 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/amazon AWS | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | DORA | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Covered entity of Amazon.com, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5776 AWS | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | FedRAMP | Moderate | active | AWS US East/West | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/AGENCYAMAZONEW AWS | FedRAMP | High | active | AWS GovCloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1603047866 AWS | FERPA | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | FIPS 140 validated | FIPS 140-3 | active | 18 active FIPS 140-3 modules: #5476 Amazon Linux 2023 GnuTLS Cryptographic Modul | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=Amazon&CertificateStatus=Active&ValidationYear=0&Standard=140-3 AWS | FIPS 140 validated | FIPS 140-3 | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | FISC (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | UK G-Cloud | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | IRS Publication 1075 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO/IEC 20000-1 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | ITAR | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | K-ISMS (Korea) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | MTCS (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | NHS DSPT (UK) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | NIST SP 800-53 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | FDA 21 CFR Part 11 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/gxp-part-11-annex-11/ AWS | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | PCI 3DS | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | SEC 17a-4 / FINRA 4511 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | GovRAMP (StateRAMP) | High | active | AWS US East/West (Authorized, Hyperscale Inheritance Authority (HIA), Moderate); | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ AWS | GovRAMP (StateRAMP) | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ AWS | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://aws.amazon.com/compliance/programs/ Box | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/box Box | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Box, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5601 Box | FedRAMP | High | active | Box Enterprise Cloud Content Collaboration Platform | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1212191840A Box | FIPS 140 validated | FIPS 140-2 | active | | Vendor compliance page | 2026-09-24 | https://www.box.com/security Box | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.box.com/security Box | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.box.com/security Box | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.box.com/security Box | ITAR | | active | | Vendor compliance page | 2026-09-24 | https://www.box.com/security Box | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.box.com/security Box | GovRAMP (StateRAMP) | High | active | Box Enterprise Cloud Content Collaboration Platform (Authorized, High) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ ClickHouse | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. ClickHouse, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/8824 ClickHouse | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://clickhouse.com/docs/cloud/security/compliance-overview ClickHouse | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://clickhouse.com/docs/cloud/security/compliance-overview ClickHouse | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://clickhouse.com/docs/cloud/security/compliance-overview ClickHouse | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://clickhouse.com/docs/cloud/security/compliance-overview Cloudflare | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/cloudflare-inc Cloudflare | Cyber Essentials (UK) | Basic | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | DORA | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Cloudflare, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5666 Cloudflare | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/cloudflare-inc Cloudflare | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | FedRAMP | High | active | Cloudflare for Government - High | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2000863987A Cloudflare | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cloudflare | GovRAMP (StateRAMP) | Moderate | active | Cloudflare for Government (Authorized, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Cloudflare | GovRAMP (StateRAMP) | | active | | Vendor compliance page | 2026-09-24 | https://www.cloudflare.com/trust-hub/compliance-resources/ Cockroach Labs | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Cockroach Labs, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/8777 Cockroach Labs | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.cockroachlabs.com/security/ Cockroach Labs | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.cockroachlabs.com/security/ Cockroach Labs | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.cockroachlabs.com/security/ Cohere | Cyber Essentials (UK) | Basic | active | | Vendor compliance page | 2026-09-24 | https://trustcenter.cohere.com/ Cohere | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://trustcenter.cohere.com/ Cohere | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trustcenter.cohere.com/ Cohere | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://trustcenter.cohere.com/ Cohere | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trustcenter.cohere.com/ Confluent | CSA STAR | Level 2 | active | CAIQ, certification, attestation | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/confluent-inc Confluent | DORA | | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. CONFLUENT, INC. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/9688 Confluent | FedRAMP | Moderate | active | Confluent Cloud for Government (CCG) (FedRAMP 20x) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2409863458XL Confluent | HITRUST | i1 | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ Confluent | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.confluent.io/trust-and-security/ CrowdStrike | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | CJIS | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | CMMC 2.0 | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/crowdstrike-inc CrowdStrike | Cyber Essentials (UK) | Basic | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | DoD Impact Level | IL5 | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. CrowdStrike, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6297 CrowdStrike | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | FedRAMP | High | active | CrowdStrike Falcon Platform for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1807853629A CrowdStrike | FedRAMP | High | in_process | CrowdStrike Falcon Platform IL5 SaaS | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2627547824 CrowdStrike | FFIEC | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | UK G-Cloud | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | NHS DSPT (UK) | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | NIST SP 800-171 | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | NIST SP 800-53 | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ CrowdStrike | GovRAMP (StateRAMP) | High | active | CrowdStrike Falcon Platform for Government (Authorized, High) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ CrowdStrike | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.crowdstrike.com/en-us/why-crowdstrike/crowdstrike-compliance-certification/ Databricks | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | DoD Impact Level | IL5 | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Databricks, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4569 Databricks | FedRAMP | Moderate | active | Databricks on AWS US East/West | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1834740315 Databricks | FedRAMP | High | active | Databricks on AWS GovCloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2324740262 Databricks | FedRAMP | High | active | Databricks on Azure Commercial | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2525247858 Databricks | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Databricks | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.databricks.com/trust/compliance Datadog | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/datadog Datadog | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Datadog, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4595 Datadog | FedRAMP | High | active | Datadog for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2023864279A Datadog | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://docs.datadoghq.com/data_security/ Datadog | GovRAMP (StateRAMP) | High | active | Datadog for Government (Authorized, High) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ dbt Labs | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Covered entity of Fivetran | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5155 dbt Labs | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.getdbt.com/security dbt Labs | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.getdbt.com/security dbt Labs | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.getdbt.com/security dbt Labs | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.getdbt.com/security dbt Labs | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.getdbt.com/security dbt Labs | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.getdbt.com/security dbt Labs | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.getdbt.com/security DigitalOcean | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports DigitalOcean | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/digitalocean DigitalOcean | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. DigitalOcean | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5296 DigitalOcean | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports DigitalOcean | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports DigitalOcean | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports DigitalOcean | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports DigitalOcean | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports DigitalOcean | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports DigitalOcean | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.digitalocean.com/trust/certification-reports Dropbox | COPPA | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | CSA STAR | Level 2 | active | CAIQ, certification, attestation | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/dropbox-inc Dropbox | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Dropbox, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6495 Dropbox | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/dropbox-inc Dropbox | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | FERPA | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | NIST SP 800-171 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | FDA 21 CFR Part 11 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Dropbox | SOX support | | active | | Vendor compliance page | 2026-09-24 | https://www.dropbox.com/business/trust/compliance/certifications-compliance Elastic | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/elasticsearch-b-v Elastic | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Elastic | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/9330 Elastic | FedRAMP | Moderate | active | Elastic Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2004446306 Elastic | FedRAMP | High | active | Elastic Cloud Hosted - High | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2523939103 Elastic | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Elastic | GovRAMP (StateRAMP) | | in_process | Elastic Cloud Hosted (Pending, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Elastic | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.elastic.co/trust Figma | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/figma Figma | CSA STAR for AI | Level 1 | active | AI-CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/figma Figma | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Figma, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6132 Figma | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/figma Figma | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | FedRAMP | Moderate | active | Figma for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2311345531 Figma | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Figma | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.figma.com/security/ Fivetran | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/fivetran-inc Fivetran | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Fivetran | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5155 Fivetran | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.fivetran.com/security Fivetran | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://www.fivetran.com/security Fivetran | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.fivetran.com/security Fivetran | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.fivetran.com/security Fivetran | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.fivetran.com/security Fivetran | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.fivetran.com/security GitHub | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/github-inc GitHub | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. GitHub | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6174 GitHub | FedRAMP | Low | active | GitHub Enterprise Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1812058188 GitHub | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://docs.github.com/en/enterprise-cloud@latest/admin/overview/accessing-compliance-reports-for-your-enterprise GitHub | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://docs.github.com/en/enterprise-cloud@latest/admin/overview/accessing-compliance-reports-for-your-enterprise GitHub | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://docs.github.com/en/enterprise-cloud@latest/admin/overview/accessing-compliance-reports-for-your-enterprise GitHub | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://docs.github.com/en/enterprise-cloud@latest/admin/overview/accessing-compliance-reports-for-your-enterprise GitLab | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/gitlab GitLab | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. GitLab | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/10120 GitLab | FedRAMP | Moderate | active | GitLab Dedicated for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2411959145 GitLab | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://about.gitlab.com/security/ GitLab | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://about.gitlab.com/security/ GitLab | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://about.gitlab.com/security/ GitLab | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://about.gitlab.com/security/ GitLab | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://about.gitlab.com/security/ GitLab | GovRAMP (StateRAMP) | Moderate | active | GitLab Dedicated for Government (Authorized, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Google Cloud | EU GMP Annex 11 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/gxp Google Cloud | APRA CPS 234 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/bsi-c5 Google Cloud | CSA STAR | Level 2 | active | CAIQ, certification, attestation | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/google Google Cloud | CSV / CSA validation | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/gxp Google Cloud | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Google | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5780 Google Cloud | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/ens Google Cloud | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/google Google Cloud | FedRAMP | High | active | Google Workspace | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1206081364 Google Cloud | FedRAMP | High | active | Google Services (Google Cloud Platform Products and underlying Infrastructure) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1805751477 Google Cloud | FedRAMP | High | ready | Google Cloud VMware Engine (GCVE) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2405153785 Google Cloud | FedRAMP | Low | active | Gemini for Government (FedRAMP 20x) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2604952026 Google Cloud | FIPS 140 validated | FIPS 140-3 | active | 15 active FIPS 140-3 modules: #5474 Knuckle Cryptographic Module; #5455 Non-Vola | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=Google&CertificateStatus=Active&ValidationYear=0&Standard=140-3 Google Cloud | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/gxp Google Cloud | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/hipaa-compliance Google Cloud | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/hitrust Google Cloud | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/irap Google Cloud | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/ismap Google Cloud | ISO/IEC 20000-1 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | MTCS (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/mtcs Google Cloud | FDA 21 CFR Part 11 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/gxp Google Cloud | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/pci-dss Google Cloud | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/offerings Google Cloud | GovRAMP (StateRAMP) | High | active | Google Services (Authorized, Federal JAB, High); Google Workspace (Authorized, F | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Google Cloud | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://cloud.google.com/security/compliance/tisax Groq | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://trust.groq.com/ Groq | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.groq.com/ HashiCorp | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/hashicorp-inc HashiCorp | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. HashiCorp, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/7882 HashiCorp | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance HashiCorp | FIPS 140 validated | FIPS 140-3 | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance HashiCorp | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance HashiCorp | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance HashiCorp | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance HashiCorp | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance HashiCorp | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance HashiCorp | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.hashicorp.com/en/trust/compliance Hugging Face | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://huggingface.co/docs/hub/security IBM | APRA CPS 234 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/ibm-cloud IBM | DORA | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. International Business Machines Corp | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5568 IBM | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/ibm-cloud IBM | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | FedRAMP | High | active | SmartCloud for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1206081363 IBM | FedRAMP | Moderate | active | IBM Platform Services for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1208031461 IBM | FedRAMP | High | in_process | IBM Platform Services for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1208031461A IBM | FedRAMP | High | active | IBM Cloud for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1211011660 IBM | FedRAMP | Moderate | active | IBM Automation Services for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1728053006 IBM | FedRAMP | Moderate | active | IBM Federal HR Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2135730387 IBM | FedRAMP | Low | active | IBM Envizi ESG Reporting | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2417469779 IBM | FedRAMP | High | active | IBM Federal ATOM | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2504062150 IBM | FedRAMP | Moderate | active | IBM Data Services for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2524349489 IBM | FedRAMP | Moderate | active | GO.gov | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2607452240 IBM | FIPS 140 validated | FIPS 140-3 | active | 6 active FIPS 140-3 modules: #5486 IBM® Crypto for C; #5221 IBM ClevOS 3 OpenSSL | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=IBM&CertificateStatus=Active&ValidationYear=0&Standard=140-3 IBM | FISC (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | UK G-Cloud | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | HDS (France) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISO/IEC 20000-1 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | ITAR | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | MTCS (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance IBM | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.ibm.com/products/cloud/compliance Informatica | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/informatica Informatica | Data Privacy Framework | | active | EU-US, UK extension; non-HR data. Informatica LLC | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/7645 Informatica | FedRAMP | Moderate | active | Informatica Intelligent Cloud Services (IICS) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2029331613 JFrog | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/jfrog JFrog | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. JFrog Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/9010 Microsoft | EU GMP Annex 11 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-gxp Microsoft | APRA CPS 234 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | CJIS | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/microsoft Microsoft | CSA STAR for AI | Level 2 | active | AI-CAIQ, validated | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/microsoft Microsoft | CSV / CSA validation | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-gxp Microsoft | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | DoD Impact Level | IL5 | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | DORA | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Microsoft Corporation | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6474 Microsoft | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/microsoft Microsoft | FedRAMP | High | active | Azure Commercial Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1209051525 Microsoft | FedRAMP | High | active | Azure Government (includes Dynamics 365) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1603087869 Microsoft | FedRAMP | High | active | Microsoft 365 Government Community Cloud-High | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1824057433 Microsoft | FedRAMP | Moderate | active | Microsoft 365 Government Community Cloud & Supporting Services | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/MSO365MT Microsoft | FedRAMP | High | in_process | Microsoft 365 Government Community Cloud & Supporting Services | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/MSO365MTA Microsoft | FERPA | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | FFIEC | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | FIPS 140 validated | FIPS 140-3 | active | 9 active FIPS 140-3 modules: #5485 Microsoft HSM Cryptographic Module; #5410 Cry | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=Microsoft&CertificateStatus=Active&ValidationYear=0&Standard=140-3 Microsoft | FIPS 140 validated | FIPS 140-2 | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | FISC (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | UK G-Cloud | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | GLBA | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | HDS (France) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | IRS Publication 1075 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO/IEC 20000-1 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO/IEC 42001 | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/microsoft Microsoft | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | ITAR | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | MTCS (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | NIST SP 800-171 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | OSFI B-13 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | FDA 21 CFR Part 11 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | PCI 3DS | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | SEC 17a-4 / FINRA 4511 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | SOX support | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Microsoft | GovRAMP (StateRAMP) | High | active | M365 Government Community Cloud & Supporting Services (Authorized, High); Micros | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Microsoft | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://learn.microsoft.com/en-us/compliance/regulatory/offering-home Mistral AI | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://trust.mistral.ai/ Mistral AI | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.mistral.ai/ Mistral AI | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://trust.mistral.ai/ Mistral AI | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.mistral.ai/ MongoDB | CJIS | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/mongodb MongoDB | DORA | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. MongoDB, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5847 MongoDB | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | FedRAMP | Moderate | active | MongoDB Atlas for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2122150307 MongoDB | FIPS 140 validated | FIPS 140-2 | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | HDS (France) | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | IRS Publication 1075 | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust MongoDB | TX-RAMP | | active | | Vendor compliance page | 2026-09-24 | https://www.mongodb.com/products/platform/trust New Relic | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/new-relic New Relic | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. New Relic | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6200 New Relic | FedRAMP | Moderate | active | New Relic | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1607057910 New Relic | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ New Relic | HITRUST | | lapsed | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ New Relic | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ New Relic | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ New Relic | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ New Relic | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ New Relic | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ New Relic | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://docs.newrelic.com/docs/security/security-privacy/compliance/regulatory-audits-new-relic-services/ Notion | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.notion.com/security Notion | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Notion Labs, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6134 Notion | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.notion.com/security Notion | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.notion.com/security Notion | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.notion.com/security Notion | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.notion.com/security Notion | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.notion.com/security Notion | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.notion.com/security Okta | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/okta-inc Okta | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Okta | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/9734 Okta | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/okta-inc Okta | FedRAMP | Moderate | active | Okta IDaaS Regulated Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1512167750 Okta | FedRAMP | High | active | Okta IDaaS Government High Cloud (GHC) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2131856836 Okta | GovRAMP (StateRAMP) | Moderate | active | Okta IDaaS (Authorized, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ OpenAI | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/openai OpenAI | FedRAMP | Moderate | active | ChatGPT Enterprise and API Platform (FedRAMP 20x) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2533155773 OpenAI | FERPA | | active | | Vendor compliance page | 2026-09-24 | https://openai.com/security-and-privacy/ OpenAI | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://openai.com/security-and-privacy/ OpenAI | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://openai.com/security-and-privacy/ OpenAI | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://openai.com/security-and-privacy/ OpenAI | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://openai.com/security-and-privacy/ OpenAI | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://openai.com/security-and-privacy/ OpenAI | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://openai.com/security-and-privacy/ Oracle | APRA CPS 234 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | CSA STAR | Level 2 | active | CAIQ, certification, attestation | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/oracle-corporation Oracle | CSA STAR for AI | Level 2 | active | AI-CAIQ, validated | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/oracle-corporation Oracle | Cyber Essentials (UK) | Basic | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | DORA | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Oracle America Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/3400 Oracle | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/oracle-corporation Oracle | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | FedRAMP | Moderate | active | Oracle Service Cloud (OSvC) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1206061351 Oracle | FedRAMP | Moderate | active | Federal Managed Cloud Services | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1209041518 Oracle | FedRAMP | Moderate | active | Fusion Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1603257882 Oracle | FedRAMP | Moderate | active | Oracle Enterprise Performance Management (EPM) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1607077914A Oracle | FedRAMP | Moderate | active | Aconex for Defense | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1712871948 Oracle | FedRAMP | High | active | Oracle Cloud Infrastructure-Government Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1900048743 Oracle | FedRAMP | Moderate | in_process | Oracle Primavera Cloud for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2534673267 Oracle | FFIEC | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | FIPS 140 validated | FIPS 140-3 | active | 9 active FIPS 140-3 modules: #5345 Acme Packet VME; #5344 Acme Packet 4600 and A | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=Oracle&CertificateStatus=Active&ValidationYear=0&Standard=140-3 Oracle | FISC (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | UK G-Cloud | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | HDS (France) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | IRS Publication 1075 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO/IEC 20000-1 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO/IEC 42001 | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/oracle-corporation Oracle | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | ITAR | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | K-ISMS (Korea) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | MAS TRM (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | MTCS (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | NHS DSPT (UK) | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | NIST SP 800-171 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | OSFI B-13 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | SEC 17a-4 / FINRA 4511 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | GovRAMP (StateRAMP) | High | active | Oracle Fusion Cloud (Authorized, Moderate); Oracle Cloud Infrastructure Governme | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Oracle | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ Oracle | TX-RAMP | | active | | Vendor compliance page | 2026-09-24 | https://www.oracle.com/corporate/cloud-compliance/ PagerDuty | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/pagerduty PagerDuty | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. PagerDuty | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/1630 PagerDuty | FedRAMP | Low | active | PagerDuty Operations Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2310974411 PagerDuty | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.pagerduty.com/security/ PagerDuty | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.pagerduty.com/security/ PagerDuty | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.pagerduty.com/security/ Palantir | CJIS | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | CMMC 2.0 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/palantir-technologies-inc Palantir | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | DoD Impact Level | IL6 | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | FedRAMP | High | active | Palantir Federal Cloud Service – Supporting Services (PFCS-SS) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2315464863 Palantir | FedRAMP | High | active | Palantir Federal Cloud Service | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2434554673 Palantir | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | ITAR | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | NHS DSPT (UK) | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | NIST SP 800-171 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | NIST SP 800-53 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Palantir | GovRAMP (StateRAMP) | | in_process | Palantir Federal Cloud Service (Pending, High) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Palantir | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.palantir.com/information-security/ Perplexity | Data Privacy Framework | | active | EU-US, UK extension; non-HR data and HR data. Perplexity AI | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/9020 Perplexity | FedRAMP | Low | active | Perplexity Enterprise and API Platform (FedRAMP 20x) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2604643715 Perplexity | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://trust.perplexity.ai/ Perplexity | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.perplexity.ai/ Perplexity | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://trust.perplexity.ai/ Perplexity | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.perplexity.ai/ Pinecone | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.pinecone.io/security/ Pinecone | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.pinecone.io/security/ Postman | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/postman-inc Postman | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Postman, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6399 Postman | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.postman.com/security/ Postman | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.postman.com/security/ Postman | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.postman.com/security/ Postman | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.postman.com/security/ Postman | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.postman.com/security/ Postman | TX-RAMP | | active | | Vendor compliance page | 2026-09-24 | https://www.postman.com/security/ Redis | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/redis Salesforce | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/salesforce-com-inc Salesforce | CSA STAR for AI | Level 1 | active | AI-CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/salesforce-com-inc Salesforce | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Salesforce | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5959 Salesforce | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/salesforce-com-inc Salesforce | FedRAMP | Moderate | active | MuleSoft Government Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1818161169 Salesforce | FedRAMP | High | active | Salesforce Government Cloud Plus | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2003061248 Salesforce | ISO/IEC 42001 | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/salesforce-com-inc SAP | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | CMMC 2.0 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/sap SAP | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | DORA | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/sap SAP | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | FedRAMP | Moderate | active | DoD Cloud Intelligent Enterprise – DD-CIE | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1602257856 SAP | FedRAMP | Moderate | active | SAP NS2 Cloud Intelligent Enterprise | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1719841002 SAP | FIPS 140 validated | FIPS 140-3 | active | 1 active FIPS 140-3 module: #5093 SAP CommonCryptoLib Crypto Kernel | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=SAP&CertificateStatus=Active&ValidationYear=0&Standard=140-3 SAP | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | HDS (France) | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html SAP | GovRAMP (StateRAMP) | Moderate | active | Cloud Intelligent Enterprise (Authorized, Moderate); Concur Travel and Expense ( | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ SAP | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.sap.com/about/trust-center/certification-compliance.html Scale AI | DoD Impact Level | IL4 | active | | Vendor compliance page | 2026-09-24 | https://scale.com/security Scale AI | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Scale AI | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4742 Scale AI | FedRAMP | High | active | Scale AI Data Platform | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2023666173 Scale AI | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://scale.com/security Scale AI | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://scale.com/security ServiceNow | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/servicenow ServiceNow | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | DoD Impact Level | IL5 | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. ServiceNow, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4740 ServiceNow | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/servicenow ServiceNow | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | FedRAMP | High | active | Government Community Cloud | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1305072116 ServiceNow | HITRUST | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO/IEC 20000-1 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | MTCS (Singapore) | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html ServiceNow | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.servicenow.com/company/trust/compliance.html Slack | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | BSI C5 (Germany) | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | DoD Impact Level | IL4 | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Salesf | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5959 Slack | ENS (Spain) | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | FedRAMP | Moderate | active | Slack | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1823447014 Slack | FedRAMP | High | active | GovSlack | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2230252267 Slack | FERPA | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | SEC 17a-4 / FINRA 4511 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Slack | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://slack.com/trust/compliance Snowflake | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/snowflake Snowflake | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | DoD Impact Level | IL5 | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | DORA | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Snowflake Inc | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5755 Snowflake | FedRAMP | Moderate | active | The Data Cloud on AWS US East/West | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1809360201 Snowflake | FedRAMP | High | active | The Data Cloud on Azure Government (High) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1809360202A Snowflake | FedRAMP | High | active | The Data Cloud on AWS GovCloud (High) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2308159208 Snowflake | FIPS 140 validated | FIPS 140-3 | active | 1 active FIPS 140-3 module: #4924 Snowflake FIPS Provider | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=Snowflake&CertificateStatus=Active&ValidationYear=0&Standard=140-3 Snowflake | GxP qualification | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | HDS (France) | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | HITRUST | r2 | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | ISO 22301 | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | NIST SP 800-53 | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | Section 508 / VPAT | | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.snowflake.com/ Snowflake | GovRAMP (StateRAMP) | High | active | Snowflake Data Cloud on AWS GovCloud (Authorized, High); Snowflake Data Cloud on | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Snyk | FedRAMP | Moderate | active | Snyk for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2230451369 Snyk | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.snyk.io/ Snyk | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://trust.snyk.io/ Snyk | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://trust.snyk.io/ Snyk | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.snyk.io/ Snyk | GovRAMP (StateRAMP) | | in_process | Snyk for Government (Pending, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Splunk | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/splunk-inc Splunk | Cyber Essentials (UK) | Basic | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | DoD Impact Level | IL5 | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Cisco | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4398 Splunk | FedRAMP | Moderate | active | Splunk Cloud Platform for FedRAMP Moderate | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/F1607197917 Splunk | FedRAMP | High | active | Splunk Cloud Platform for FedRAMP High | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2314156865 Splunk | FIPS 140 validated | FIPS 140-3 | active | 2 active FIPS 140-3 modules: #5444 Splunk FIPS Provider (based on the OpenSSL FI | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=Splunk&CertificateStatus=Active&ValidationYear=0&Standard=140-3 Splunk | FIPS 140 validated | FIPS 140-2 | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | ISMAP (Japan) | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | ISO 9001 | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | SOC 2 | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | GovRAMP (StateRAMP) | Moderate | active | AppDynamics (Authorized, Moderate); Splunk Cloud (Authorized, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Splunk | GovRAMP (StateRAMP) | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Splunk | TX-RAMP | | active | | Vendor compliance page | 2026-09-24 | https://www.splunk.com/en_us/about-splunk/splunk-data-security-and-privacy/compliance-at-splunk.html Stripe | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://docs.stripe.com/security Stripe | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Stripe | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/10014 Stripe | SOC 1 | | active | | Vendor compliance page | 2026-09-24 | https://docs.stripe.com/security Stripe | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://docs.stripe.com/security Stripe | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://docs.stripe.com/security Supabase | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://supabase.com/security Supabase | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://supabase.com/security Supabase | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://supabase.com/security Teradata | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Teradata Corporation | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4350 Together AI | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://trust.together.ai/ Together AI | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://trust.together.ai/ Twilio | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data. Twilio Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5394 Twilio | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.twilio.com/en-us/security Twilio | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.twilio.com/en-us/security Twilio | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.twilio.com/en-us/security Twilio | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.twilio.com/en-us/security Twilio | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.twilio.com/en-us/security Twilio | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.twilio.com/en-us/security Twilio | GovRAMP (StateRAMP) | | in_process | Twilio Core Platform (Progressing) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Vercel | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Vercel Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/6847 Vercel | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://vercel.com/security Vercel | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://vercel.com/security Vercel | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://vercel.com/security Vercel | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://vercel.com/security Vercel | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://vercel.com/security Wiz | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/wiz Wiz | FedRAMP | High | active | Wiz for U.S. Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2308034636A Wiz | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | PCI DSS | | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.wiz.io/trust-center Wiz | GovRAMP (StateRAMP) | High | active | Wiz Moderate for U.S. Government (Authorized, High); Next (Progressing, Moderate | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Workday | APEC CBPR / PRP | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/workday-inc Workday | Cyber Essentials (UK) | Plus | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Workday, Inc. | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4519 Workday | EU Cloud Code of Conduct | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/workday-inc Workday | EU Cloud Code of Conduct | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | FedRAMP | Moderate | active | Workday Government Cloud (WGC) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2103344623 Workday | UK G-Cloud | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | HIPAA (BAA) | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | IRAP (Australia) | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | ISO/IEC 27001 | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | ISO/IEC 27017 | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | ISO/IEC 27018 | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | ISO/IEC 27701 | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | ISO/IEC 42001 | | active | Partner entry in the STAR Registry | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/workday-inc Workday | ISO/IEC 42001 | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | NIST SP 800-171 | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | SOC 1 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | SOC 2 | Type II | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | SOC 3 | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | TISAX | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html Workday | TX-RAMP | | active | | Vendor compliance page | 2026-09-24 | https://www.workday.com/en-us/why-workday/trust/compliance.html xAI | CSA STAR | Level 1 | active | CAIQ | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/xai Zoom | CSA STAR | Level 2 | active | CAIQ, attestation | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/zoom-video-communications-inc Zoom | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Zoom | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/5728 Zoom | FedRAMP | Moderate | active | Zoom for Government | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1825941347A Zoom | GovRAMP (StateRAMP) | Moderate | active | Zoom for Government (Authorized, Moderate) | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/ Zscaler | CSA STAR | Level 2 | active | CAIQ, certification | CSA STAR Registry | 2026-09-23 | https://cloudsecurityalliance.org/star/registry/zscaler Zscaler | Data Privacy Framework | | active | EU-US, UK extension, Swiss-US; non-HR data and HR data. Zscaler | Data Privacy Framework List | 2026-09-23 | https://www.dataprivacyframework.gov/participant/4433 Zscaler | FedRAMP | High | active | Zscaler Private Access - Government (Zero Trust Networking - VPN Replacement) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1719759604 Zscaler | FedRAMP | Moderate | active | Zscaler Internet Access - Government (Secure Web Gateway - vTIC) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR1720454205 Zscaler | FedRAMP | Moderate | active | Zscaler Private Access - Government (Zero Trust Exchange - VPN Replacement) | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2219763604 Zscaler | FedRAMP | High | active | Zscaler Internet Access - Government (Secure Web Gateway - vTIC) - High | FedRAMP Marketplace | 2026-09-23 | https://marketplace.fedramp.gov/products/FR2227062482 Zscaler | FIPS 140 validated | FIPS 140-3 | active | 1 active FIPS 140-3 module: #5080 Zscaler Java Crypto Module | NIST CMVP | 2026-09-24 | https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&Vendor=Zscaler&CertificateStatus=Active&ValidationYear=0&Standard=140-3 Zscaler | GovRAMP (StateRAMP) | Moderate | active | Zscaler Private Access (Authorized, Moderate); Zscaler Internet Access - Governm | GovRAMP product list | 2026-09-24 | https://govramp.org/product-list/