We are thrilled to announce that Elastic Cloud Serverless has achieved several significant compliance certifications. This milestone reinforces our commitment to security, privacy, and regulatory compliance. Elastic Cloud Serverless is now audited or certified under the following industry-leading frameworks: SOC 2 Type 2, ISO 27001, ISO 27017, ISO 27018, Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), and Cloud Security Alliance (CSA) Security, Trust, Assurance, and Risk (STAR).
What this means for you
These certifications demonstrate our dedication to maintaining high standards of security, governance, and data protection. Here’s a brief overview of why each framework matters to you:
-
SOC 2 Type 2: The Elastic Cloud Serverless service meets rigorous standards for security, availability, confidentiality, and privacy.
-
ISO 27001: Elastic has established, implemented, maintained, and continually improved upon an information security management system (ISMS). Elastic Cloud Serverless is now certified under that ISMS.
-
ISO 27017 and 27018: Elastic has implemented security controls applicable to the provision and use of cloud services as well as measures to protect personal data in the cloud.
-
PCI DSS: Elastic Cloud Serverless has demonstrated compliance with all applicable PCI DSS requirements.
-
HIPAA: Elastic Cloud Serverless satisfies the requirements of the HIPAA Security Rule and Breach Notification Rule.
-
CSA STAR: The CSA STAR certification demonstrates our commitment to cloud security best practices.
Why it matters
Achieving these certifications is a testament to our continued investment in comprehensive security practices and our commitment to protecting your data. In addition to a faster, more flexible way to scale search, security, and observability capabilities — introduced with the general availability of Elastic Cloud Serverless — it also meets the highest standards of security and compliance.
Learn more
To learn more about our full portfolio of compliance certifications, visit our Trust Center.
We are excited to continue providing you with secure, reliable, and compliant cloud services. We will continue to maintain these certifications and expand our portfolio of supported compliance frameworks to position Elastic Cloud Serverless as a trusted solution for search, security, and observability applications.
The release and timing of any features or functionality described in this post remain at Elastic’s sole discretion. Any features or functionality not currently available may not be delivered on time or at all.
Leave a Reply