Snowflake compliance, certifications and attestations

An auditor's report on controls relevant to customers' financial reporting.

Type IIVendor page

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

Type IIVendor page

A certified information security management system.

HeldVendor page

A certified quality management system.

HeldVendor page

A certified business continuity management system.

HeldVendor page

A certified AI management system: how a company governs the AI it builds or uses.

HeldVendor page

Authorization to sell a cloud service to US federal agencies.

HighFedRAMP MarketplaceThe Data Cloud on AWS GovCloud (High); The Data Cloud on AWS US East/West

A provisional authorization for Department of Defense data at an impact level.

IL5Vendor page

A security verification for US state and local government cloud buyers.

HighGovRAMP product listSnowflake Data Cloud on Azure Government (Authorized, High); Snowflake Data Cloud on AWS GovCloud (Authorized, High); Snowflake Data Cloud on AWS US East/West (Authorized, Moderate); Snowflake Data Cloud on Azure South Central US (Authorized, Moderate)

The federal security and privacy control catalog (the basis of FedRAMP).

HeldVendor page

Cryptographic modules validated under FIPS 140-2 or 140-3.

FIPS 140-3NIST CMVP1 active FIPS 140-3 module: #4924 Snowflake FIPS Provider

Accessibility conformance reports (VPAT) for US federal buyers.

HeldVendor page

Validated compliance with the card industry data security standard.

HeldVendor page

Readiness for the EU Digital Operational Resilience Act for financial entities.

HeldVendor page

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

A certified assessment against the HITRUST CSF.

r2Vendor page

Certification to host personal health data in France (Hébergeur de Données de Santé).

HeldVendor page

Support for regulated life-sciences workloads under GMP, GCP and GLP.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data. Snowflake Inc

A listing in the Cloud Security Alliance STAR Registry.

Level 1CSA STAR RegistryCAIQ

The UK government-backed baseline security certification.

PlusVendor page

An assessment by an ASD-endorsed assessor for Australian government data.

HeldVendor page