Zscaler compliance, certifications and attestations

Authorization to sell a cloud service to US federal agencies.

HighFedRAMP MarketplaceZscaler Internet Access - Government (Secure Web Gateway - vTIC) - High; Zscaler Internet Access - Government (Secure Web Gateway - vTIC)

A security verification for US state and local government cloud buyers.

ModerateGovRAMP product listZscaler Internet Access - Government (ZIA Gov) (Authorized, Moderate); Zscaler Private Access (Authorized, Moderate)

Cryptographic modules validated under FIPS 140-2 or 140-3.

FIPS 140-3NIST CMVP1 active FIPS 140-3 module: #5080 Zscaler Java Crypto Module

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data and HR data. Zscaler

A listing in the Cloud Security Alliance STAR Registry.

Level 2CSA STAR RegistryCAIQ, certification