Splunk compliance, certifications and attestations

An auditor's report on controls relevant to customers' financial reporting.

HeldVendor page

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

HeldVendor page

A certified information security management system.

HeldVendor page

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

Protection of personal data in public clouds acting as processors.

HeldVendor page

A certified quality management system.

HeldVendor page

Authorization to sell a cloud service to US federal agencies.

HighFedRAMP MarketplaceSplunk Cloud Platform for FedRAMP High; Splunk Cloud Platform for FedRAMP Moderate

A provisional authorization for Department of Defense data at an impact level.

IL5Vendor page

A security verification for US state and local government cloud buyers.

ModerateGovRAMP product list and vendor pageSplunk Cloud (Authorized, Moderate); AppDynamics (Authorized, Moderate)

Texas state certification for cloud services sold to state agencies.

HeldVendor page

Cryptographic modules validated under FIPS 140-2 or 140-3.

FIPS 140-3NIST CMVP and vendor page2 active FIPS 140-3 modules: #5444 Splunk FIPS Provider (based on the OpenSSL FIPS Provider); #5187 Splunk Cryptographic Module

Validated compliance with the card industry data security standard.

HeldVendor page

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Cisco Systems, Inc.

A listing in the Cloud Security Alliance STAR Registry.

Level 2CSA STAR RegistryCAIQ, certification

The UK government-backed baseline security certification.

BasicVendor page

An assessment by an ASD-endorsed assessor for Australian government data.

HeldVendor page

Registration on Japan's government cloud security list.

HeldVendor page

An assessment shared through the German automotive industry's exchange.

HeldVendor page