Attestations & Certifications
Protection of our customer data is very important to OVHcloud. Thus, OVHcloud takes the necessary steps to protect customer data to ensure security and availability by implementing high levels of transparency, standards, governance, and regulatory compliance. The OVHcloud IaaS services are provided to our customers through Data Centers, servers, and a network owned and operated by OVHcloud.
OVHcloud services are built from the ground up to address our customers' most rigorous security and privacy demands. OVHcloud provides a comprehensive set of compliance offerings, including attestations and certifications applicable to its services and Data Centers.
OVHcloud makes compliance user-friendly, so our customers can spend less time on compliance initiatives and more time running their businesses.
Learn more about Data Protection at OVHcloud.
OVHcloud has independent third-party audit firms that conduct annual attestations and certification examinations to evaluate the solutions we offer.
OVHcloud adheres to rigorous security standards associated with various industry-specific compliance frameworks for our Infrastructure as a Service (IaaS) products and Data Centers.
OVHcloud is dedicated to delivering cloud services that adopt industry best practices for a comprehensive set of security and compliance standards.
ISO/IEC 27001:2013 Certification and ISMS relating to information security management systems for cloud services.
ISO/IEC 27701:2019 Certification and PIMS relating to personal data processing security management.
AICPA certification SSAE 16/ISAE 3402 Type 2 for control over financial reporting.
Compliance with the United States Health Insurance Portability and Accountability Act in our US data centers.
Services vs. Attestations/Certificates
|SSAE18 Type 2 SOC 1||SSAE18 Type 2 SOC 2||SSAE18 Type 2 SOC 3||HIPAA Type 1||PCI DSS|
|Hosted Private Cloud (HPC)||✘||✘||✘||✘||✘||✘|
|Dedicated Servers (Bare Metal Servers)||✘||✘||✘||✘||✘||✘|
|Public Cloud Instance (PCI)||✘||✘||✘||✘||✘||✘|
|Virtual Private Servers (VPS)||✘||✘||✘||✘||✘||✘|
|US Data Centers (Vint Hill & Hillsboro)||✘||✘||✘||✘||✘||✘|
- ISO/IEC 27001:2013 OVHcloud Certificate includes ISO 27017 / ISO 27018 and ISO 27701 (Privacy) and expires June 24, 2025.
- ISO/IEC 27001: 2013 Attestation Type 1 as of December 31, 2022
- Type 2 SOC 1 (AICPA SSAE No. 18 and IAASB ISAE 3402 Standards) as of January 1 – December 31, 2022
- Type 2 SOC 2 (AICPA SSAE No. 18) as of January 1 – December 31, 2022
- Type 1 HIPAA and HITECH as of December 31, 2022
- Payment Card Industry (PCI) Data Security Standard (DSS) for all OVHcloud services and US Data Centers AOC as of February 10, 2023
- Cloud Security Alliance - Consensus Assessments Initiative Questionnaire (CAIQ)
We are here to help you get started. You may schedule a free consultation with an OVHcloud advisor to discuss an architecture that best suits your business needs.
ISO 27001 Certificate
The ISO 27001 Certificate is available on our third-party audit firm’s website. Prospective customers can obtain our AIPCA SSAE18 Type 2 SOC 3 attestation report.
Security Advisory Services
The OVHcloud Security and Compliance teams will support your organization's security and compliance teams with advisory services, with the option of completing questionnaires on the Information Security Management System ("ISMS") and US Data Centers' security measures.