Splunk compliance, certifications and attestations
Data platforms · 19 certifications held · 5 from public registries · read Sep 24, 2026
| Certification | Evidence | ||
|---|---|---|---|
| SOC reports | |||
| SOC 1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SOC 2 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO standards | |||
| ISO/IEC 27001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27017 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27018 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 9001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| US government | |||
| FedRAMP High Splunk Cloud Platform for FedRAMP Moderate; Splunk Cloud Platform for FedRAMP High FedRAMP Marketplace | High | FedRAMP Marketplace | Sep 23, 2026 |
| DoD Impact Level IL5 Vendor page | IL5 | Vendor page | Sep 24, 2026 |
| GovRAMP (StateRAMP) Moderate AppDynamics (Authorized, Moderate); Splunk Cloud (Authorized, Moderate) GovRAMP product list and vendor page | Moderate | GovRAMP product list and vendor page | Sep 24, 2026 |
| TX-RAMP Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FIPS 140 validated FIPS 140-3 2 active FIPS 140-3 modules: #5444 Splunk FIPS Provider (based on the OpenSSL FIPS Provider); #5187 Splunk Cryptographic Module NIST CMVP and vendor page | FIPS 140-3 | NIST CMVP and vendor page | Sep 24, 2026 |
| Finance | |||
| PCI DSS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Health | |||
| HIPAA (BAA) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Privacy and cloud | |||
| Data Privacy Framework Held EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Cisco Systems, Inc. Data Privacy Framework List | Held | Data Privacy Framework List | Sep 23, 2026 |
| CSA STAR Level 2 CAIQ, certification CSA STAR Registry | Level 2 | CSA STAR Registry | Sep 23, 2026 |
| Regional programs | |||
| Cyber Essentials (UK) Basic Vendor page | Basic | Vendor page | Sep 24, 2026 |
| IRAP (Australia) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISMAP (Japan) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| TISAX Held Vendor page | Held | Vendor page | Sep 24, 2026 |
From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.
History
| Date | Change | |
|---|---|---|
| Removed FedRAMP Splunk Observability Cloud for FedRAMP Moderate | FedRAMP Marketplace | |
| In process FedRAMP Moderate Splunk Observability Cloud for FedRAMP Moderate | FedRAMP Marketplace | |
| Upgraded FedRAMP High Splunk Cloud Platform for FedRAMP High | FedRAMP Marketplace | |
| Added CSA STAR First listed in the CSA STAR Registry | CSA STAR Registry | |
| In process FedRAMP High Splunk Cloud Platform for FedRAMP High | FedRAMP Marketplace | |
| Added FedRAMP Moderate Splunk Cloud Platform for FedRAMP Moderate | FedRAMP Marketplace | |
| In process FedRAMP Moderate Splunk Cloud Platform for FedRAMP Moderate | FedRAMP Marketplace | |
| Added Data Privacy Framework Covered entity of Cisco Systems, Inc. | Data Privacy Framework List |
About Splunk
Search, observability and SIEM.
- Status
- Acquired by Cisco
- Headquarters
- San Francisco, United States
- Founded
- 2004
- Website
- splunk.com
No public evidence found for
- SOC reports
- SOC 3
- ISO standards
- ISO 27701, ISO 22301, ISO 20000, ISO 27799
- AI governance
- ISO 42001, STAR AI
- US government
- CMMC, 800-171, 800-53, ITAR, CJIS, IRS 1075, 508/VPAT
- Finance
- PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
- Health
- HITRUST, HDS, NHS DSPT, PHIPA
- Life sciences (GxP)
- GxP, Part 11, Annex 11, CSV
- Privacy and cloud
- CBPR, EU CoC
- Regional programs
- G-Cloud, C5, ENS, SecNum, MTCS, K-ISMS
- Education
- FERPA, HECVAT, COPPA
Compare with Palantir, Snowflake, MongoDB, Databricks, Elastic