CrowdStrike compliance, certifications and attestations

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

HeldVendor page

A certified information security management system.

HeldVendor page

A certified AI management system: how a company governs the AI it builds or uses.

HeldVendor page

Authorization to sell a cloud service to US federal agencies.

HighFedRAMP MarketplaceCrowdStrike Falcon Platform for Government; CrowdStrike Falcon Platform IL5 SaaS

A provisional authorization for Department of Defense data at an impact level.

IL5Vendor page

A security verification for US state and local government cloud buyers.

HighGovRAMP product listCrowdStrike Falcon Platform for Government (Authorized, High)

Cybersecurity Maturity Model Certification for the defense supply chain.

HeldUnverifiedVendor page

Controls for protecting controlled unclassified information in non-federal systems.

HeldUnverifiedVendor page

The federal security and privacy control catalog (the basis of FedRAMP).

HeldUnverifiedVendor page

Support for the FBI CJIS Security Policy for criminal justice data.

HeldVendor page

Accessibility conformance reports (VPAT) for US federal buyers.

HeldVendor page

Validated compliance with the card industry data security standard.

HeldVendor page

Mapping to the FFIEC IT examination guidance for US banks.

HeldUnverifiedVendor page

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

The NHS Data Security and Protection Toolkit self-assessment for suppliers.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data and HR data. CrowdStrike, Inc.

Certification under the Cross-Border Privacy Rules or Privacy Recognition for Processors.

HeldVendor page

A listing in the Cloud Security Alliance STAR Registry.

Level 2CSA STAR RegistryCAIQ, certification

The UK government-backed baseline security certification.

BasicVendor page

Listing on the UK government's cloud procurement framework.

HeldVendor page

An attestation against Germany's Cloud Computing Compliance Criteria Catalogue.

HeldVendor page

Certification under Spain's Esquema Nacional de Seguridad.

HeldVendor page

An assessment by an ASD-endorsed assessor for Australian government data.

HeldVendor page

An assessment shared through the German automotive industry's exchange.

HeldVendor page