# PingCAP Third-Party Attestations, Audits, and Certifications

![`smart`](ComplianceBlockStyle_aa_001_20230518.png)

+ TiDB Cloud has passed the following certifications
  + GDPR
  + PCI DSS 
  + Service Organization Controls (SOC)
    + SOC 1 Type II 
    + SOC 2 Type II
    + SOC 3
  + ISO/IEC 27001:2013 
  + ISO/IEC 27701 
  + Supports HIPAA compliance
+ Additional information available at `https://www.pingcap.com/trust-compliance-center/`
+ Contact PingCAP business representative or send email to `legal@pingcap.com`` to request the on demand access to PingCAP’s compliance reports

------------------------------------------------------------------------------
TiDB Cloud obtains industry certifications and independent third party attestations to guarantee the TiDB Cloud meets high standard of security and compliance.

GDPR 
TiDB Cloud has been certified by ePrivate GmbH GDPR. It certifies that PingCAP complies with data privacy regulations through effective data management. 

PCI DSS 
The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organizations that process branded credit cards from major credit card programs. It demonstrates that TiDB Cloud ensure business and consumer information security compliance in fintech, blockchain, and SaaS. 

System and Organization Control (SOC)
The System and Organization Control (SOC) audit report is a third-party independent report published by the US Certified Public Accountant Association (AICPA) to audit service providers' internal controls and is a globally recognized data security audit standard. The audits endorse that PingCAP has the ability to provide global TiDB Cloud customers with a secure, stable and efficient public database Cloud as a Service. It can meet the data privacy and security needs of large customers, especially Listed Companies, and can provide these enterprises with a world-class secure and trusted database Cloud as a Service. 

ISO/IEC 27001:2013  
ISO/IEC 27001:2013 is a globally recognized standard that sets out the policies and requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). PingCAP has achieved ISO/IEC 27001:2013 for TiDB Cloud, certified by British Standards Institution (BSI), an ANAB-accredited certification body.

ISO/IEC 27701 
ISO/IEC 27701 is a privacy extension to ISO/IEC 27001 Information Security Management and ISO/IEC 27002 Security Controls. As an international management system standard, it provides guidance on the protection of privacy, including how organizations should manage personal information, and assists in demonstrating compliance with privacy regulations around the world.

To access the PingCAP HIPAA whitepaper, please visit the following link: `https://static.pingcap.com/files/2023/04/21043549/PingCAP-HIPAA-Whitepaper.pdf`