Confluent
Security and trust center evidence
Founded by the team that built Apache Kafka®, Confluent builds a streaming platform that enables companies to easily access data as
Summary
Confluent has 4 registry-verified rows and 1 third-party reported row in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: CSA STAR Level 2 attestation on the registry, which is built on a SOC 2 examination. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 19 Oct 2026, Confluent has a SOC 2 Type II report, evidenced through a CSA STAR Level 2 attestation on the registry built on a SOC 2 examination issued 12 Aug 2020. As of 18 Oct 2026, Confluent is FedRAMP Authorized, with the authorization issued on 6 Mar 2026 and audited by Fortreum, LLC. As of 19 Oct 2026, Confluent is listed in the Visa Global Registry as PCI DSS validated through 31 Jan 2027, with the entry issued on 11 Aug 2021 and audited by Schellman Compliance, LLC. As of 19 Oct 2026, Confluent also holds a CSA STAR Level 2 attestation issued on 12 Aug 2020. As of 19 Oct 2026, Confluent's EU-US Data Privacy Framework certification, issued 6 Oct 2025, expired on 6 Oct 2026 and is no longer active.
- SOC 2 Type II report evidenced via CSA STAR Level 2 attestation issued 12 Aug 2020 (as of 19 Oct 2026)
- FedRAMP Authorized, issued 6 Mar 2026, audited by Fortreum, LLC (as of 18 Oct 2026)
- PCI DSS listed in Visa Global Registry, validated through 31 Jan 2027 (as of 19 Oct 2026); EU-US Data Privacy Framework expired 6 Oct 2026 (as of 19 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Oct 2026; it is regenerated whenever a row changes.
Among data platforms vendors
4verified rows
Category median 0, across 69 indexed data platforms vendors. Confluent has more verified rows than 99 percent of them.
apache kafkadata pipelinedata streamingevent streamingreal-time data
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2ReportedCSA STAR Level 2 attestation on the registry, which is built on a SOC 2 examination
as of 26 Oct 20266 sources
FedRAMPVerifiedFedRAMP Authorized
as of 2 Nov 202647 sources · Fortreum, LLC
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-01-31
as of 19 Oct 20261 source · Schellman Compliance, LLC.
CSA STARVerifiedSTAR Level 2 attestation
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 19 Oct 2026PCI DSS auditor changedAuditor changed from AWA International Group, LLC to Schellman Compliance, LLC..
- 12 Oct 2026PCI DSS auditor changedAuditor changed from International Certificate Authority of Management System to AWA International Group, LLC.
- 29 Sep 2026PCI DSS renewedExpiry moved from 2027-01-31 to 2027-07-31.
- 29 Sep 2026PCI DSS auditor changedAuditor changed from Schellman Compliance, LLC. to International Certificate Authority of Management System.
- 18 Sep 2026First indexed by CertReports5 evidence rows across 5 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Data platforms category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Keen IO
Data platforms
Keen is a fully managed event streaming platform built on Apache
Streamkap
DevOps and observability
Act on database events in under
Artie
Data platforms
Software that streams data from databases to warehouses in real-time
Snowflake
Data platforms
Snowflake is a data platform built for the
Evidence against regulations
All regulations for ConfluentHow much of each regulation’s vendor requirements Confluent’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read