Skip to content

DropboxCompliance, certifications and attestations

Certifications held, by family19 held
Status
Public
Founded
2007
Trust center Company profile
19
Certifications held
3
Backed by a registry
20
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devEarnings

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. AddedData Privacy FrameworkDropbox, Inc.
  2. AddedCSA STARFirst listed in the CSA STAR Registry

Evidence

Every source, what it says and when it was read.

SOC 11 source

HeldVendor compliance page
...ISO 27701 certificate. SOC Reports Service Organization Controls (SOC) Reports, known as SOC 1, SOC 2, or SOC 3, are frameworks established by the American Institute of Certified Public Accountants (AICPA)...
Captured Sep 24, 2026Open source

SOC 21 source

HeldVendor compliance page
...27701 certificate. SOC Reports Service Organization Controls (SOC) Reports, known as SOC 1, SOC 2, or SOC 3, are frameworks established by the American Institute of Certified Public Accountants (AICPA) for reporting...
Captured Sep 24, 2026Open source

SOC 31 source

HeldVendor compliance page
...certificate. SOC Reports Service Organization Controls (SOC) Reports, known as SOC 1, SOC 2, or SOC 3, are frameworks established by the American Institute of Certified Public Accountants (AICPA) for reporting on...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...through a series of audits by an independent third-party, Netherlands-based EY CertifyPoint. ISO 27001 (Information Security Management) ISO 27001 is recognized as the premier information security management system...
Captured Sep 24, 2026Open source

ISO/IEC 270171 source

HeldVendor compliance page
...Council). View the Dropbox Standard, Advanced, Enterprise and Education ISO 27001 certificate. ISO 27017 (Cloud Security) ISO 27017 is an international standard for cloud security that provides guidelines for security...
Captured Sep 24, 2026Open source

ISO/IEC 270181 source

HeldVendor compliance page
...together. View the Dropbox Standard, Advanced, Enterprise and Education ISO 27017 certificate. ISO 27018 (Cloud Privacy and Data Protection) ISO 27018 is an international standard for privacy and data protection that...
Captured Sep 24, 2026Open source

ISO/IEC 277011 source

HeldVendor compliance page
...crises. View the Dropbox Standard, Advanced, Enterprise and Education ISO 22301 certificate. ISO 27701 (Privacy Information Management) ISO 27701 is an international standard for privacy information management. The...
Captured Sep 24, 2026Open source

HIPAA (BAA)1 source

HeldVendor compliance page
...Japanese government. View Dropbox's listing on the official registry of ISMAP products here. HIPAA/HITECH Dropbox will sign business associate agreements (BAAs) with Dropbox Standard, Advanced, Enterprise and...
Captured Sep 24, 2026Open source

PCI DSS1 source

HeldVendor compliance page
...more information on how Dropbox can help aid in your compliance efforts with 21 CFR Part 11. PCI DSS Dropbox is a Payment Card Industry Data Security Standard (PCI DSS) compliant merchant. The PCI Attestation of...
Captured Sep 24, 2026Open source

Data Privacy Framework1 source

HeldData Privacy Framework List

EU-US, UK extension, Swiss-US; non-HR data and HR data. Dropbox, Inc.

EU-US status: Active; certified since 2016-09-23; recertification due 2027-05-07; verification: Self-Assessment
Captured Sep 23, 2026Since Sep 23, 2016Renewal due May 7, 2027Open source

EU Cloud Code of Conduct2 sources

HeldCSA STAR Registry

Partner entry in the STAR Registry

Listed as Dropbox, Inc. since 2016-02-11; EU Cloud Code of Conduct entry
Captured Sep 23, 2026Since Feb 11, 2016Open source
HeldVendor compliance page
...facilitate their GDPR compliance. For more information, please see this help center article. EU Cloud Code of Conduct The EU Cloud Code of Conduct is a voluntary instrument that enables a cloud service provider, such as Dropbox,...
Captured Sep 24, 2026Open source

CSA STAR1 source

Held · Level 2CSA STAR Registry

CAIQ, certification, attestation

Listed as Dropbox, Inc. since 2016-02-11; Level 2 (third-party audit)
Captured Sep 23, 2026Since Feb 11, 2016Open source

ISMAP1 source

HeldVendor compliance page
...(CCM) v3.0.1. View our CSA STAR Level 2 Certification and Attestation on the CSA website. ISMAP Information System Security Management and Assessment Program (ISMAP) is a Japanese certification for the use...
Captured Sep 24, 2026Open source

Compare with

Weekly: vendors that gained or lost a certification, Wednesdays.