DigitalOcean compliance, certifications and attestations

An auditor's report on controls relevant to customers' financial reporting.

Type IIVendor page

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

Type IIVendor page

A public summary of a SOC 2 examination, readable without an NDA.

HeldVendor page

A certified information security management system.

HeldVendor page

A certified quality management system.

HeldVendor page

A certified business continuity management system.

HeldVendor page

Validated compliance with the card industry data security standard.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data. DigitalOcean

Certification under the Cross-Border Privacy Rules or Privacy Recognition for Processors.

HeldVendor page

A listing in the Cloud Security Alliance STAR Registry.

Level 1CSA STAR RegistryCAIQ