Alibaba CloudCompliance, certifications and attestations

...Card Industry 3DS Core Security Standard PCI DSS Pay Card Industry Data Security Standards SOC 1 Report Service Organization Controls - SOC 1 Type 2 Report SOC 2 Report Service Organization Controls - SOC 2...

...Data Security Standards SOC 1 Report Service Organization Controls - SOC 1 Type 2 Report SOC 2 Report Service Organization Controls - SOC 2 Type 2 Report SOC 3 Report Service Organization Controls - SOC 3...

...Controls - SOC 1 Type 2 Report SOC 2 Report Service Organization Controls - SOC 2 Type 2 Report SOC 3 Report Service Organization Controls - SOC 3 Report Regional Alibaba Cloud adheres to all the domestic information...

...standards and is committed to using international best practices. CSA STAR CSA STAR Certification ISO 27001 Information Security Management Systems (ISMS) Standard ISO 20000 Information Technology Service Management Systems...

...Continuity Management Systems (BCMS) Standard ISO 9001 Quality Management Systems (QMS) Standard ISO 27017 Information technology - Security techniques - Code of practice for information security controls based on ISO/IEC...

...Code of practice for information security controls based on ISO/IEC 27002 for cloud services ISO 27018 Information technology - Security techniques - Code of practice for protection of personally identifiable information...

...protection of personally identifiable information (PII) in public clouds acting as PII processors ISO 27701 Security techniques - Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management ISO 29151...

...Practices (GxP) TISAX (German) DE Trusted Information Security Assessment Exchange (TISAX) HIPAA (United States) US The Health Insurance Portability and Accountability Act (HIPAA) MPA (United States) US The...

...Information Management System Standard PCI 3DS Payment Card Industry 3DS Core Security Standard PCI DSS Pay Card Industry Data Security Standards SOC 1 Report Service Organization Controls - SOC 1 Type 2 Report SOC...

EU-US, UK extension, Swiss-US; non-HR data. Covered entity of Alibaba Cloud US LLC

EU-US status: Active; certified since 2018-03-12; recertification due 2027-02-02; verification: Outside Compliance Review

...burden. GDPR (European Union) EU The European Union General Data Protection Regulation (GDPR) EU Cloud COC (European Union) EU The European Union Cloud Code of Conduct (CoC) PDPA (Singapore) SG Personal Data Protection...

CAIQ, certification

Listed as Alibaba Cloud Computing Ltd. since 2015-03-10; Level 2 (third-party audit)

...Data Protection Trustmark (DPTM) C5 (German) DE Cloud Computing Compliance Controls Catalog (C5) AIC4 (German) DE AI Cloud Service Compliance Criteria Catalog (AIC4) Trusted Cloud (German) DE The Trusted Cloud...

...certifications. GxP (United States) US Good Clinical, Laboratory, and Manufacturing Practices (GxP) TISAX (German) DE Trusted Information Security Assessment Exchange (TISAX) HIPAA (United States) US The Health Insurance...