Committed to CDP Security, Privacy, and Responsible AI
You don’t compromise on your customers’ data security and privacy, and neither do we. Built on a foundation of trust, our platform stands up to the toughest CISO scrutiny.
Compliance
SOC 2 Type 2
Treasure Data undergoes an annual SOC 2 Type 2 audit covering the Security, Confidentiality, Availability, and Processing Integrity (PI) Trust Services Criteria (TSC).
SOC 3
Treasure Data undergoes an annual SOC 3 Type 2 audit covering the Security, Confidentiality, Availability, and Processing Integrity (PI) Trust Services Criteria (TSC).
ISO/IEC 27001
Treasure Data undergoes an annual ISO27001:2022 certification audit over the ISMS that governs the Treasure Data CDP.
ISO 27701
Treasure Data undergoes an annual ISO/IEC 27701:2019 certification audit over the PIMS that governs the Treasure Data CDP.
ISO/IEC 27017
Treasure Data undergoes an annual ISO/IEC 27017:2015 certification audit over the ISMS that governs the Treasure Data CDP.
ISO/IEC 27018
Treasure Data undergoes an annual ISO/IEC 27018:2019 certification audit over the ISMS that governs the Treasure Data CDP.
HIPAA Type 2
HIPAA compliance ensures that Treasure Data protects the confidentiality, integrity, and security of ePHI for our healthcare and life sciences customers. Treasure Data undergoes an annual HIPAA Type 2 audit to verify all HIPAA Security Rule requirements are addressed and operating effectively.
CSA STAR Level 1
CSA Star Level 1 is a self attestation intended for Cloud Service Providers (CSPs) that validates Treasure Data’s use of industry-leading best practices to secure data in our CDP.
TRUSTe Responsible AI Certification
This AI certification is focused on privacy and data protection. It demonstrates Treasure Data’s commitment to the development of AI services according to responsible AI principles. Its scope includes Treasure Data Audience Agent and AI Agent Foundry
STAR for AI Level 1
CSA Star Level 1 is a self assessment that contains 243 control objectives distributed across 18 security domains. It maps to leading standards, including ISO 42001, ISO 27001, NIST AI RMF 1.0, and BSI AIC4 and guides us to develop, implement, and operate AI technologies in a secure and responsible manner.
Privacy Mark
Treasure Data undergoes annual PrivacyMark compliance audits. PrivacyMark is a privacy-centric certification in Japan that focuses on enhancing consumers’ awareness of personally identifiable information (PII) protections. The requirements are based on JISQ standards and are governed by JIPDEC (Japan Institute for Promotion of Digital Economy and Community). PrivacyMark is viewed as the Japan equivalent of the ISO/IEC 27001.
FISC
Treasure Data has developed a guide to help our customers understand how our control environment aligns with the Center for Financial Industry Information Systems (FISC) guidelines. Many of the controls outlined in our guide are already implemented as part of existing third-party audited compliance offerings, such as our ISO/IEC 27001 certification and SOC 2 Type 2 report.
Shared security model
Data localization
All infrastructure and storage services run within regional AWS data centers and leverage multiple Availability Zones. Treasure Data uses the following AWS regions:
-
US East (Northern Virginia)
-
US West (Oregon)
-
Europe (Frankfurt)
-
Asia Pacific (Tokyo)
-
Asia Pacific (Seoul)
A CDP built on trust
All great experiences come down to trust. Do your customers trust you with their data? With Treasure Data, you have the tools and processes needed to ensure that every experience is built on a bedrock of trust that your customers demand.
