Trust Platform Certification Reports and Resources | DigitalOcean

·Certification reports

·Please visit our Security Reports & Certifications Center for access to our SOC 2 Type II Report, PCI-DSS SAQ-A, CIS Benchmarks, and colocated data center certifications (e.g., ISO 27001, SOC Reports, PCI-DSS, etc).

·SOC 2 Type II and SOC 3 Type II

·DigitalOcean maintains a SOC 2 Type II and SOC 3 Type II certification, issued by our independent auditor, Schellman & Company. By achieving compliance with this globally recognized information security controls framework, DigitalOcean demonstrates a commitment to protecting sensitive customer and company information.

·CIS Benchmarks

·Through our CIS Foundations and CIS Services Benchmarks, we empower our customers with actionable resources to better secure their infrastructure. And, because CIS Benchmarks are aligned to various security frameworks by design, customers can reference our Benchmarks as a resource for their respective compliance programs.

·Global PRP Certification

·DigitalOcean maintains compliance with rigorous privacy and data protection standards, as evidenced by our Global Privacy Recognition for Processors (Global PRP) certification. With this certification, DigitalOcean demonstrates our commitment to prioritizing security and confidentiality in data processing operations to maintain trust with our customers.

·PCI-DSS

·DigitalOcean maintains a Zero-Footprint data policy by way of our PCI-DSS SAQ-A validation. Through our attestation, DigitalOcean commits to not storing, processing, or transmitting cardholder data within our administrative environment.

·CSA Self-Assessment

·DigitalOcean has achieved Cloud Security Alliance (CSA) STAR Level 1 which addresses fundamental security principles across 16 domains to help cloud customers assess the overall security risk of our services.

·The Global PRP System Certification Mark and Global PRP System Certification MarkTM are trademarks of the International Trade Administration/Office of Global Data Policy and Privacy, used with permission