trust-center
Certifications.
| Certification |
Scope |
Status |
| SOC 2 Type II |
Security + Availability + Confidentiality + Privacy |
Active; report under MNDA |
| ISO/IEC 27001:2022 |
ISMS |
Active; certificate available |
| ISO/IEC 27017 |
Cloud security extension |
Active |
| ISO/IEC 27018 |
Personal data in the cloud |
Active |
| HITRUST CSF |
Healthcare-extended |
Active |
| FedRAMP High |
NIST 800-53 Rev 5 baseline |
Authorised |
| DoD Impact Level 5 (IL5) |
DoD CC SRG |
In progress |
| CSA STAR |
Cloud Security Alliance |
Active |
| PCI DSS (where applicable) |
Payment card data |
Active per scope |
| EU Cloud Code of Conduct |
EU GDPR cloud |
Adherent |
How to obtain reports.
Report packages available under MNDA. Request via Trust Center or contact the security team.
Government cloud authorisations.
| Cloud |
Authorisation |
| AWS GovCloud |
Operating per FedRAMP High |
| Azure Government / GCC High |
Operating per FedRAMP High |
| Google Cloud for Government |
Operating per FedRAMP High |
| Oracle Government Cloud |
Operating per FedRAMP High |