Elastic Cloud Serverless on AWS achieves major compliance certifications

These certifications demonstrate our dedication to maintaining high standards of security, governance, and data protection. Here’s a brief overview of why each framework matters to you:

• SOC 2 Type 2: The Elastic Cloud Serverless service meets rigorous standards for security, availability, confidentiality, and privacy.

• ISO 27001: Elastic has established, implemented, maintained, and continually improved upon an information security management system (ISMS). Elastic Cloud Serverless is now certified under that ISMS.

• ISO 27017 and 27018: Elastic has implemented security controls applicable to the provision and use of cloud services as well as measures to protect personal data in the cloud.

• PCI DSS: Elastic Cloud Serverless has demonstrated compliance with all applicable PCI DSS requirements. 

• HIPAA: Elastic Cloud Serverless satisfies the requirements of the HIPAA Security Rule and Breach Notification Rule.

• CSA STAR: The CSA STAR certification demonstrates our commitment to cloud security best practices.

Achieving these certifications is a testament to our continued investment in comprehensive security practices and our commitment to protecting your data. In addition to a faster, more flexible way to scale search, security, and observability capabilities — introduced with the general availability of Elastic Cloud Serverless — it also meets the highest standards of security and compliance.

To learn more about our full portfolio of compliance certifications, visit our Trust Center.

We are excited to continue providing you with secure, reliable, and compliant cloud services. We will continue to maintain these certifications and expand our portfolio of supported compliance frameworks to position Elastic Cloud Serverless on AWS as a trusted solution for search, security, and observability applications.

As of the publication date, currently Elastic Cloud Serverless on AWS is externally certified and attested to against the above mentioned frameworks and standards. As Elastic Cloud Serverless expands to additional regions and cloud providers, we will work to certify and attest to the new environments at the same level of rigor.