Skip to content

Elastic compliance, certifications and attestations

Data platforms · 13 certifications held · 3 from public registries · read Sep 24, 2026

CertificationEvidence
SOC reports
SOC 2
Held

Vendor page

Sep 24, 2026
SOC 3
Held

Vendor page

Sep 24, 2026
ISO standards
ISO/IEC 27001
Held

Vendor page

Sep 24, 2026
ISO/IEC 27017
Held

Vendor page

Sep 24, 2026
ISO/IEC 27018
Held

Vendor page

Sep 24, 2026
US government
FedRAMP
High

Elastic Cloud; Elastic Cloud Hosted - High

FedRAMP Marketplace

Sep 23, 2026
GovRAMP (StateRAMP)
In process

Elastic Cloud Hosted (Pending, Moderate)

GovRAMP product list

Sep 24, 2026
Finance
PCI DSS
Held

Vendor page

Sep 24, 2026
Health
HIPAA (BAA)
Held

Vendor page

Sep 24, 2026
Privacy and cloud
Data Privacy Framework
Held

EU-US, UK extension, Swiss-US; non-HR data and HR data. Elastic

Data Privacy Framework List

Sep 23, 2026
CSA STAR
Level 2

CAIQ, certification

CSA STAR Registry

Sep 23, 2026
Regional programs
Cyber Essentials (UK)
Plus

Vendor page

Sep 24, 2026
IRAP (Australia)
Held

Vendor page

Sep 24, 2026
TISAX
Held

Vendor page

Sep 24, 2026

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

DateChange
Upgraded FedRAMP High

Elastic Cloud Hosted - High

In process FedRAMP High

Elastic Cloud Hosted - High

Added Data Privacy Framework

Elastic

Added FedRAMP Moderate

Elastic Cloud

In process FedRAMP Moderate

Elastic Cloud

Added CSA STAR

First listed in the CSA STAR Registry

About Elastic

Elasticsearch and Elastic Cloud for search, observability and security.

Status
Public
Founded
2012
Website
elastic.co

No public evidence found for

SOC reports
SOC 1
ISO standards
ISO 27701, ISO 9001, ISO 22301, ISO 20000, ISO 27799
AI governance
ISO 42001, STAR AI
US government
DoD IL, TX-RAMP, CMMC, 800-171, 800-53, FIPS 140, ITAR, CJIS, IRS 1075, 508/VPAT
Finance
PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
Health
HITRUST, HDS, NHS DSPT, PHIPA
Life sciences (GxP)
GxP, Part 11, Annex 11, CSV
Privacy and cloud
CBPR, EU CoC
Regional programs
G-Cloud, C5, ENS, SecNum, ISMAP, MTCS, K-ISMS
Education
FERPA, HECVAT, COPPA

Compare with Palantir, Snowflake, MongoDB, Databricks, Splunk

Company profile
Across fru.devAcquisitionsawardsblogsEarningsincidentsleadersmarketplacesPaydaysReleasesslasstoriesConferencestitles

Certification changes by email

Wednesdays: vendors that gained or lost a certification, only in weeks with a change.

Double opt-in. Unsubscribe any time.