Skip to main content
Altana logo

Altana

Security and trust center evidence

altana.aiLast verified 1 Nov 2026
Request the report Are you Altana?

Summary

SOC 2 mark, CertReports state Verified as of 1 Nov 2026SOC 2VerifiedFedRAMP mark, CertReports state Verified as of 1 Nov 2026FedRAMPVerifiedISO/IEC 27001 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 27001Vendor-statedCyber Essentials mark, CertReports state Vendor-stated as of 30 Sep 2026Cyber EssentialsVendor-statedISO/IEC 27701 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 27701Vendor-statedISO/IEC 42001 mark, CertReports state Vendor-stated as of 30 Sep 2026ISO 42001Vendor-statedSOC 3 mark, CertReports state Verified as of 1 Nov 2026SOC 3VerifiedCyber Essentials Plus mark, CertReports state Vendor-stated as of 30 Sep 2026CE PlusVendor-stated

Altana has 3 registry-verified rows and 5 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is SOC 2: Evidenced by the public SOC 3 report for the same examination period. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Altana has a SOC 2 Type II report, evidenced by a public SOC 3 report for the same examination period ending 31 Mar 2026, issued 21 May 2026 and audited by Aprio, LLP, as of 15 Oct 2026. Altana is FedRAMP Authorized, with the registry entry issued 5 Feb 2026 and assessed by Schellman Compliance, LLC, as of 14 Oct 2026. Altana states on its trust centre that it holds ISO/IEC 27001:2022, ISO/IEC 27701, and ISO/IEC 42001:2023, as of 30 Sep 2026. Altana states on its trust centre that it holds UK Cyber Essentials and Cyber Essentials Plus, as of 30 Sep 2026. No public evidence found for PCI DSS or the EU-US Data Privacy Framework for Altana as of 15 Oct 2026.

  • SOC 2: has a SOC 2 Type II report (evidenced by public SOC 3), period end 31 Mar 2026, auditor Aprio, LLP (as of 15 Oct 2026)
  • FedRAMP: Authorized, issued 5 Feb 2026, assessed by Schellman Compliance, LLC (as of 14 Oct 2026)
  • ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, Cyber Essentials, Cyber Essentials Plus: vendor states on trust centre (as of 30 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 15 Oct 2026; it is regenerated whenever a row changes.

Evidence count

3verified rows

Compliance grid

No public evidence yet for HIPAA, GDPR, PCI DSS, CSA STAR. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (4)

  • Amazon Web Services logo
    Amazon Web ServicesCloud Compute and Data · Primary: United States, Int'l Regions: available upon request
  • Databricks logo
    DatabricksData Processing & Platform Functionality · Primary: United States, Int'l Regions: available upon request
  • Datadog logo
    DatadogLog Aggregation, Monitoring, and Alerting · Primary: United States
  • Microsoft Azure logo
    Microsoft AzureCloud Compute and Data · Primary: United States, Int'l Regions: available upon request

Security profile

Pen test cadence
annual

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

  1. 25 Sep 2026SOC 2 state changedState moved from Vendor-stated to Verified.
  2. 25 Sep 2026SOC 2 auditor changedAuditor changed from unknown to Aprio, LLP.
  3. 25 Sep 2026SOC 3 state changedState moved from Vendor-stated to Verified.
  4. 25 Sep 2026SOC 3 auditor changedAuditor changed from unknown to Aprio, LLP.
  5. 18 Sep 2026ISO/IEC 42001 evidence addedA ISO/IEC 42001 row entered the index with state Vendor-stated.
  6. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  7. 18 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.
  8. 18 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
  9. 18 Sep 2026Subprocessor added: DatabricksDatabricks appeared on the subprocessor list.
  10. 18 Sep 2026Subprocessor added: DatadogDatadog appeared on the subprocessor list.

Evidence against regulations

All regulations for Altana

How much of each regulation’s vendor requirements Altana’s public evidence reaches.

Reviewing a vendor on public evidence

All articles