Certifications: 63 in 10 families, 60 held by at least one of the 64 vendors

An auditor's report on controls relevant to customers' financial reporting.

21 of 64 vendors

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

52 of 64 vendors

A public summary of a SOC 2 examination, readable without an NDA.

19 of 64 vendors

A certified information security management system.

48 of 64 vendors

Cloud-specific security controls on top of ISO 27001.

27 of 64 vendors

Protection of personal data in public clouds acting as processors.

26 of 64 vendors

A certified privacy information management system extending ISO 27001.

20 of 64 vendors

A certified quality management system.

13 of 64 vendors

A certified business continuity management system.

12 of 64 vendors

A certified IT service management system.

7 of 64 vendors

Information security controls for personal health information.

1 of 64 vendors

A certified AI management system: how a company governs the AI it builds or uses.

19 of 64 vendors · CSA STAR Registry

A listing in the CSA STAR for AI program.

4 of 64 vendors · CSA STAR Registry

Authorization to sell a cloud service to US federal agencies.

38 of 64 vendors · FedRAMP Marketplace

A provisional authorization for Department of Defense data at an impact level.

10 of 64 vendors

A security verification for US state and local government cloud buyers.

17 of 64 vendors · GovRAMP list

Texas state certification for cloud services sold to state agencies.

5 of 64 vendors

Cybersecurity Maturity Model Certification for the defense supply chain.

4 of 64 vendors

Controls for protecting controlled unclassified information in non-federal systems.

7 of 64 vendors

The federal security and privacy control catalog (the basis of FedRAMP).

5 of 64 vendors

Cryptographic modules validated under FIPS 140-2 or 140-3.

13 of 64 vendors · NIST CMVP

Support for export-controlled defense data under ITAR.

6 of 64 vendors

Support for the FBI CJIS Security Policy for criminal justice data.

5 of 64 vendors

Safeguards for federal tax information held by agencies and their vendors.

4 of 64 vendors

Accessibility conformance reports (VPAT) for US federal buyers.

11 of 64 vendors

Validated compliance with the card industry data security standard.

32 of 64 vendors

Compliance with the PCI standard for 3-D Secure card authentication.

3 of 64 vendors

Attestation against the SWIFT Customer Security Programme controls.

0 of 64 vendors

WORM record retention assessed against SEC Rule 17a-4(f) and FINRA 4511.

4 of 64 vendors

Support for the Gramm-Leach-Bliley Act safeguards on financial data.

2 of 64 vendors

Controls documented to support customers' Sarbanes-Oxley reporting.

2 of 64 vendors

Mapping to the FFIEC IT examination guidance for US banks.

3 of 64 vendors

Alignment with MAS technology risk management and outsourcing guidelines.

2 of 64 vendors

Support for APRA prudential standards on information security.

5 of 64 vendors

Alignment with Canadian OSFI technology and cyber risk guidelines.

2 of 64 vendors

Alignment with Japan's FISC security guidelines for financial institutions.

5 of 64 vendors

Readiness for the EU Digital Operational Resilience Act for financial entities.

10 of 64 vendors

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

39 of 64 vendors

A certified assessment against the HITRUST CSF.

11 of 64 vendors

Certification to host personal health data in France (Hébergeur de Données de Santé).

7 of 64 vendors

The NHS Data Security and Protection Toolkit self-assessment for suppliers.

4 of 64 vendors

Support for Ontario's Personal Health Information Protection Act.

0 of 64 vendors

Support for regulated life-sciences workloads under GMP, GCP and GLP.

12 of 64 vendors

Support for electronic records and signatures under 21 CFR Part 11.

4 of 64 vendors

Support for computerised systems under EU GMP Annex 11.

2 of 64 vendors

Computer system validation or computer software assurance packages for customers.

2 of 64 vendors

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

46 of 64 vendors · DPF List

Certification under the Cross-Border Privacy Rules or Privacy Recognition for Processors.

8 of 64 vendors

Adherence to the GDPR code of conduct for cloud processors.

13 of 64 vendors · CSA STAR Registry

A listing in the Cloud Security Alliance STAR Registry.

41 of 64 vendors · CSA STAR Registry

The UK government-backed baseline security certification.

15 of 64 vendors

Listing on the UK government's cloud procurement framework.

6 of 64 vendors

An attestation against Germany's Cloud Computing Compliance Criteria Catalogue.

11 of 64 vendors

Certification under Spain's Esquema Nacional de Seguridad.

13 of 64 vendors

ANSSI qualification for trusted cloud services in France.

0 of 64 vendors

An assessment by an ASD-endorsed assessor for Australian government data.

17 of 64 vendors

Registration on Japan's government cloud security list.

14 of 64 vendors

Certification under Singapore's Multi-Tier Cloud Security standard.

7 of 64 vendors

Korea's information security management system certification.

3 of 64 vendors

An assessment shared through the German automotive industry's exchange.

21 of 64 vendors

Support for student education records under FERPA.

7 of 64 vendors

A published Higher Education Community Vendor Assessment Toolkit.

3 of 64 vendors

Support for the Children's Online Privacy Protection Act, where stated.

2 of 64 vendors