GitHub compliance, certifications and attestations

An auditor's report on controls relevant to customers' financial reporting.

Type IIVendor page

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

Type IIVendor page

A certified information security management system.

HeldVendor page

Authorization to sell a cloud service to US federal agencies.

LowFedRAMP MarketplaceGitHub Enterprise Cloud

Validated compliance with the card industry data security standard.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data. GitHub

A listing in the Cloud Security Alliance STAR Registry.

Level 2CSA STAR RegistryCAIQ, certification