DigitalOcean compliance, certifications and attestations

Cloud · 10 certifications held · 2 from public registries · read Sep 24, 2026

Certification	Status	Source	Evidence
SOC reports
SOC 1 Type II Vendor page	Type II	Vendor page	Sep 24, 2026
SOC 2 Type II Vendor page	Type II	Vendor page	Sep 24, 2026
SOC 3 Held Vendor page	Held	Vendor page	Sep 24, 2026
ISO standards
ISO/IEC 27001 Held Vendor page	Held	Vendor page	Sep 24, 2026
ISO 9001 Held Vendor page	Held	Vendor page	Sep 24, 2026
ISO 22301 Held Vendor page	Held	Vendor page	Sep 24, 2026
Finance
PCI DSS Held Vendor page	Held	Vendor page	Sep 24, 2026
Privacy and cloud
Data Privacy Framework Held EU-US, UK extension, Swiss-US; non-HR data. DigitalOcean Data Privacy Framework List	Held	Data Privacy Framework List	Sep 23, 2026
APEC CBPR / PRP Held Vendor page	Held	Vendor page	Sep 24, 2026
CSA STAR Level 1 CAIQ CSA STAR Registry	Level 1	CSA STAR Registry	Sep 23, 2026

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Date	Change	Source
Jan 24, 2021	Added CSA STAR First listed in the CSA STAR Registry	CSA STAR Registry
Feb 6, 2017	Added Data Privacy Framework DigitalOcean	Data Privacy Framework List

About DigitalOcean

Developer cloud: droplets, Kubernetes, managed databases, GPUs.

No public evidence found for

ISO standards: ISO 27017, ISO 27018, ISO 27701, ISO 20000, ISO 27799
AI governance: ISO 42001, STAR AI
US government: FedRAMP, DoD IL, GovRAMP, TX-RAMP, CMMC, 800-171, 800-53, FIPS 140, ITAR, CJIS, IRS 1075, 508/VPAT
Finance: PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
Health: HIPAA, HITRUST, HDS, NHS DSPT, PHIPA
Life sciences (GxP): GxP, Part 11, Annex 11, CSV
Privacy and cloud: EU CoC
Regional programs: Cyber Ess., G-Cloud, C5, ENS, SecNum, IRAP, ISMAP, MTCS, K-ISMS, TISAX
Education: FERPA, HECVAT, COPPA