generated: '2026-07-19'
method: searched
source: https://www.hivemq.com/solutions/technology/hivemq-security/
description: >-
  Standards and compliance posture for HiveMQ. Protocol conformance is asserted
  from HiveMQ's first-party product documentation (the broker is a reference
  MQTT implementation); compliance certifications are those published on the
  HiveMQ security/trust page and captured in security/hive-mq-trust-center.yml.
standards:
  - id: mqtt-3.1.1
    conforms: true
    evidence: HiveMQ broker fully supports the OASIS MQTT 3.1.1 specification.
  - id: mqtt-5.0
    conforms: true
    evidence: HiveMQ broker fully supports the OASIS MQTT 5.0 specification.
  - id: mqtt-sparkplug-b
    conforms: true
    evidence: HiveMQ supports MQTT Sparkplug B for unified namespace architectures.
  - id: soc2
    conforms: true
    evidence: SOC 2 stated on the HiveMQ security/trust page.
  - id: iso-27001
    conforms: true
    evidence: ISO/IEC 27001 stated on the HiveMQ security/trust page.
  - id: gdpr
    conforms: true
    evidence: GDPR compliance stated on the HiveMQ security/trust page.
  - id: csa-star
    conforms: true
    evidence: CSA STAR stated on the HiveMQ security/trust page.
  - id: rfc9457-problem-details
    conforms: false
    evidence: No public OpenAPI available to confirm problem+json error envelopes.
compliance_program:
  published: true
  url: https://www.hivemq.com/solutions/technology/hivemq-security/
  certifications: [SOC 2, ISO 27001, GDPR, CSA STAR]