Claroty understands that our customers need to comply with their national, regional, and industry-specific requirements. We have made significant progress on security certifications for our services, and we continue to invest in this area.
SOC 2 Type 2
SOC 2 Type 2 certification validates our ongoing commitment to managing data securely and maintaining stringent operational standards. Evaluated across security, availability, processing integrity, confidentiality, and privacy, our compliance demonstrates robust controls and processes that provide continuous assurance to our customers and partners.
ISO 27001 is the internationally recognized standard for information security management systems (ISMS). By following this comprehensive framework, we ensure the confidentiality, integrity, and availability of information through risk-based controls and continual improvement, offering our customers industry-leading security practices and assurance.
ISO 27701 extends the ISO 27001 standard to include privacy information management systems (PIMS). Our adherence to ISO 27701 strengthens our privacy controls, ensuring compliance with global data privacy regulations and demonstrating a proactive approach to protecting personal data.
ISO 27017 complements ISO 27001 by providing cloud-specific guidance for information security controls. Our adherence to ISO 27017 strengthens the security of our cloud services, clarifies shared responsibilities, and helps protect customer data throughout its cloud lifecycle.
ISO 27018 complements ISO 27001 by providing privacy-specific guidance for protecting personally identifiable information (PII) in public cloud environments. Our adherence to ISO 27018 reinforces our commitment to privacy, transparency, and the responsible processing of personal data.
C5 (Cloud Computing Compliance Controls Catalog) Type 2
The C5 (Cloud Computing Compliance Controls Catalog) is a standard developed by the German Federal Office for Information Security (BSI) for cloud service providers. Our adherence to C5 ensures robust security practices, transparency, and compliance with stringent data protection and IT security requirements, enhancing customer confidence in our cloud-based services.
Claroty participates in the Cloud Security Alliance (CSA) Security, Trust, Assurance and Risk (STAR) program, a globally recognized framework designed to promote transparency, accountability, and best practices in cloud security.
The Health Insurance Portability and Accountability Act (HIPAA) establishes national standards for safeguarding sensitive patient health information. Our adherence to HIPAA ensures that our solutions meet strict privacy, security, and breach notification requirements to protect health data, demonstrating our commitment to regulatory compliance and trust in the healthcare industry.
The General Data Protection Regulation (GDPR) governs the privacy and security of personal data for individuals within the European Union. Our alignment with GDPR ensures that we prioritize data protection, transparency, and user rights, reinforcing trust and compliance in the global data protection landscape.
The Security of Critical Infrastructure Act 2018 (SOCI) establishes a comprehensive framework for safeguarding Australia’s critical infrastructure sectors, essential for maintaining national security and economic stability. Our adherence to the SOCI Act reflects our commitment to maintaining the highest security standards, ensuring the protection of essential services from both cyber and physical threats and providing our customers with confidence that their interests are safeguarded within our rigorous security protocols.
Our SOC 3 report provides public assurance that Claroty maintains effective controls to help protect customer data and support the security, availability, and confidentiality of our services. The report is based on the AICPA Trust Services Criteria and reflects our commitment to transparent, independently assessed security practices.
The ENX Association supports with TISAX (Trusted Information Security Assessment Exchange), on behalf of the German Association of the Automotive Industry (VDA), the common acceptance of information security assessments across the automotive industry. For Claroty, the confidentiality, availability, and integrity of information are of great importance. We maintain extensive measures to protect sensitive and confidential information and follow the VDA Information Security Assessment (VDA ISA) questionnaire. TISAX and TISAX results are not intended for general public. Claroty’s assessment result is exclusively retrievable by registered participants through the ENX Portal.
Scope ID: S1M799 Assessment ID: AMPMKX-1
TISAX is a registered trademark governed by ENX Association. Learn more: enx.com/tisax
CCN (Centro Criptológico Nacional Standards)
The CCN (Centro Criptológico Nacional) standards provide a security framework for public-sector IT systems in Spain. By complying with CCN guidelines, we ensure that our solutions meet stringent information security and risk management requirements, delivering trusted services to government and enterprise clients.
How Claroty Protects Your Data
Welcome to Claroty’s Trust Center. We are committed to providing transparency about how we protect customer data and secure our environment. Our robust, multi-layered data protection and information security program incorporates technical, organizational, and procedural controls designed to safeguard data, mitigate cybersecurity risks, and ensure compliance with leading industry standards and regulations, including ISO 27001, ISO 27701, SOC 2 Type 2, GDPR, HIPAA, and other applicable local privacy laws.
Claroty complies with the European Union’s General Data Protection Regulation (GDPR), with our strong foundation of implemented security and privacy frameworks and certified security and privacy controls.
Data Processing Agreement (DPA)
Data Processing Agreements are required by the GDPR.
