generated: '2026-08-27'
method: searched
source: https://www.confluent.io/trust-and-security/
http_status: 200
verified: '2026-08-27'
description: >-
  Confluent publishes a trust and security page carrying named third-party attestations, with a
  request path for the reports that are not public downloads.
trust_center:
  url: https://www.confluent.io/trust-and-security/
  name: Trust and Compliance
  statement: >-
    "Compliance is built into our platform and processes and verified by independent third
    parties."
certifications:
  - name: SOC 1 Type 2
    description: >-
      Focuses on user entities' internal control over financial reporting. Offered for
      Confluent Cloud and Confluent Platform.
    access: request
  - name: SOC 2 Type 2
    description: >-
      Non-financial reporting controls for security, availability and confidentiality. Offered
      for Confluent Cloud and Confluent Platform.
    access: request
  - name: SOC 3
    description: General use report covering security, availability and confidentiality.
    access: public download
  - name: ISO 27001
    description: Information security management. Certificate and Statement of Applicability published.
    access: public download
  - name: ISO 27701
    description: >-
      ISO/IEC 27701:2019 — international framework for managing privacy information in relation
      to the processing of personal data.
  - name: PCI DSS
    description: Attestation of Compliance (AOC) available on request.
    access: request
  - name: CSA STAR Level 2
    description: >-
      Cloud Security Alliance STAR registry, Level 2. CSA's self-assessment tool is referenced
      on the page.
  - name: TISAX
    description: Automotive-sector information security assessment exchange.
readiness_programs:
  - {name: GDPR Readiness, description: 'Confluent is committed to supporting customers in their GDPR compliance efforts.'}
  - {name: HIPAA Readiness}
  - {name: Financial Services Regulation Compliance}
security_contact:
  email: security@confluent.io
  security_txt: https://www.confluent.io/.well-known/security.txt
  policy: https://www.confluent.io/trust-and-security/
see_also:
  - security/confluent-vulnerability-disclosure.yml
  - security/confluent-domain-security.yml
  - conformance/confluent-conformance.yml