Alibaba Cloud compliance, certifications and attestations
Cloud · 28 certifications held · 2 from public registries · read Sep 24, 2026
| Certification | Evidence | ||
|---|---|---|---|
| SOC reports | |||
| SOC 1 Type II Vendor page | Type II | Vendor page | Sep 24, 2026 |
| SOC 2 Type II Vendor page | Type II | Vendor page | Sep 24, 2026 |
| SOC 3 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO standards | |||
| ISO/IEC 27001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27017 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27018 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27701 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 9001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 22301 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 20000-1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 27799 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| US government | |||
| NIST SP 800-53 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Finance | |||
| PCI DSS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| PCI 3DS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FISC (Japan) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Health | |||
| HIPAA (BAA) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Life sciences (GxP) | |||
| GxP qualification Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Privacy and cloud | |||
| Data Privacy Framework Held EU-US, UK extension, Swiss-US; non-HR data. Covered entity of Alibaba Cloud US LLC Data Privacy Framework List | Held | Data Privacy Framework List | Sep 23, 2026 |
| APEC CBPR / PRP Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| EU Cloud Code of Conduct Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| CSA STAR Level 2 CAIQ, certification CSA STAR Registry | Level 2 | CSA STAR Registry | Sep 23, 2026 |
| Regional programs | |||
| BSI C5 (Germany) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| MTCS (Singapore) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| K-ISMS (Korea) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| TISAX Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Education | |||
| FERPA Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| HECVAT Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| COPPA Held Vendor page | Held | Vendor page | Sep 24, 2026 |
From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.
History
| Date | Change | |
|---|---|---|
| Added Data Privacy Framework Covered entity of Alibaba Cloud US LLC | Data Privacy Framework List | |
| Added CSA STAR First listed in the CSA STAR Registry | CSA STAR Registry |
About Alibaba Cloud
The cloud arm of Alibaba Group.
- Website
- alibabacloud.com
No public evidence found for
- AI governance
- ISO 42001, STAR AI
- US government
- FedRAMP, DoD IL, GovRAMP, TX-RAMP, CMMC, 800-171, FIPS 140, ITAR, CJIS, IRS 1075, 508/VPAT
- Finance
- SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, DORA
- Health
- HITRUST, HDS, NHS DSPT, PHIPA
- Life sciences (GxP)
- Part 11, Annex 11, CSV
- Regional programs
- Cyber Ess., G-Cloud, ENS, SecNum, IRAP, ISMAP
Compare with Microsoft, Oracle, AWS, Google Cloud, IBM