Elastic compliance, certifications and attestations

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

HeldVendor page

A public summary of a SOC 2 examination, readable without an NDA.

HeldVendor page

A certified information security management system.

HeldVendor page

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

Protection of personal data in public clouds acting as processors.

HeldVendor page

Authorization to sell a cloud service to US federal agencies.

HighFedRAMP MarketplaceElastic Cloud; Elastic Cloud Hosted - High

Validated compliance with the card industry data security standard.

HeldVendor page

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data and HR data. Elastic

A listing in the Cloud Security Alliance STAR Registry.

Level 2CSA STAR RegistryCAIQ, certification

The UK government-backed baseline security certification.

PlusVendor page

An assessment by an ASD-endorsed assessor for Australian government data.

HeldVendor page

An assessment shared through the German automotive industry's exchange.

HeldVendor page