Cloud provider compliance
A compilation of compliance records from 71 cloud providers.
Frameworks
Pick a framework to see which providers support it.
-
SOC 2
An independent audit of a company's security controls.
57 /112 providers a SOC 2 report -
ISO 27001
The international standard for managing information security, certified by an accredited auditor.
52 /112 providers an ISO 27001 certificate -
HIPAA
The US law covering patient health data.
31 /112 providers HIPAA compliance -
GDPR
The EU's data protection law.
59 /112 providers a GDPR Data Processing Agreement -
PCI DSS
The payment card industry's standard for handling card data.
21 /112 providers a PCI DSS attestation -
FedRAMP
The US federal government's authorization to host agency data.
6 /112 providers a FedRAMP authorization
Heads up: Every listing links to the provider's own statement. An attestation can cover one tier, one region or the platform alone rather than every service. Verify the scope before you rely on it. A provider not listed means we found nothing to link to, not that they lack it.
Coverage by provider
One row per provider that publishes at least one attestation, the most first.
| Provider | SOC 2 | ISO 27001 | HIPAA | GDPR | PCI DSS | FedRAMP |
|---|---|---|---|---|---|---|
Akamai Cloud
|
Yes | Yes | Yes | Yes | Yes | Yes |
Amazon Web Services
|
Type II | Yes | Yes | Yes | Level 1 | High |
Cloudflare
|
Type II | Yes | Yes | Yes | Level 1 | High |
Google Cloud
|
Type II | Yes | Yes | Yes | Yes | High |
Microsoft Azure
|
Type II | Yes | Yes | Yes | Level 1 | High |
Oracle Cloud
|
Yes | Yes | Yes | Yes | Yes | High |
Alibaba Cloud
|
Type II | Yes | Yes | Yes | Level 1 | |
DigitalOcean
|
Type II | Yes | Yes | Yes | Yes | |
Heroku
|
Type II | Yes | Yes | Yes | Level 1 | |
Leaseweb
|
Yes | Yes | Yes | Yes | Yes | |
Netlify
|
Type II | Yes | Yes | Yes | Yes | |
OVHcloud
|
Type II | Yes | Yes | Yes | Level 1 | |
Vercel
|
Type II | Yes | Yes | Yes | Yes | |
Vultr
|
Type II | Yes | Yes | Yes | Yes | |
Wasabi
|
Yes | Yes | Yes | Yes | Yes | |
Backblaze
|
Type II | Yes | Yes | Yes | ||
Cerebrium
|
Type II | Yes | Yes | Yes | ||
Exoscale
|
Type II | Yes | Yes | Yes | ||
Firebase
|
Type II | Yes | Yes | Yes | ||
Fly.io
|
Type II | Yes | Yes | Yes | ||
Gcore
|
Type I | Yes | Yes | Yes | ||
Impossible Cloud
|
Yes | Yes | Yes | Yes | ||
Nebius
|
Type II | Yes | Yes | Yes | ||
Render
|
Type II | Yes | Yes | Yes | ||
Runpod
|
Type II | Yes | Yes | Yes | ||
Supabase
|
Type II | Yes | Yes | Yes | ||
TensorWave
|
Type II | Yes | Yes | Yes | ||
AceCloud
|
Yes | Yes | Yes | |||
Civo
|
Type II | Yes | Yes | |||
CoreWeave
|
Type II | Yes | Yes | |||
Crusoe
|
Type II | Yes | Yes | |||
Daytona
|
Type II | Yes | Yes | |||
Hetzner
|
Yes | Yes | Yes | |||
Hostinger
|
Yes | Yes | Yes | |||
Hot Aisle
|
Type II | Yes | Yes | |||
Koyeb
|
Yes | Yes | Yes | |||
Latitude.sh
|
Type II | Yes | Yes | |||
Leafcloud
|
Type II | Yes | Yes | |||
Massed Compute
|
Type II | Yes | Yes | |||
Oblivus
|
Type II | Yes | Yes | |||
Paperspace
|
Yes | Yes | Level 1 | |||
Railway
|
Type II | Yes | Yes | |||
Together AI
|
Type II | Yes | Yes | |||
UpCloud
|
Yes | Yes | Yes | |||
Vast.ai
|
Type II | Yes | Yes | |||
Verda
|
Type II | Yes | Yes | |||
Atlas Cloud
|
Yes | Yes | ||||
Beam
|
Type II | Yes | ||||
Bunny CDN
|
Yes | Yes | ||||
Cleura
|
Yes | Yes | ||||
CUDO Compute
|
Type II | Yes | ||||
deplo.io
|
Yes | Yes | ||||
Elastx
|
Yes | Yes | ||||
Fal.ai
|
Type II | Yes | ||||
Hugging Face
|
Type II | Yes | ||||
Hyperstack
|
Type II | Yes | ||||
Lambda Labs
|
Type II | Yes | ||||
Scaleway
|
Yes | Yes | ||||
Sevalla
|
Type II | Yes | ||||
Zenlayer
|
Yes | Yes | ||||
Zerops
|
Yes | Yes | ||||
Canopy Wave
|
Type II | |||||
Contabo
|
Yes | |||||
Hyperbolic
|
Yes | |||||
Lyceum
|
Yes | |||||
Novita
|
Type II | |||||
Packet·ai
|
Yes | |||||
Ravion
|
Type II | |||||
Salad
|
Type I | |||||
Shadeform
|
Yes | |||||
Thunder Compute
|
Yes |
No providers matching your filters.
Showing 71 of 71 providers · 41 publish nothing we can link to and are not listed