Skip to main content
EL

Elastic

Security and trust center evidence

Power insights and outcomes with The Elasticsearch

elastic.coLast verified 31 Oct 2026
Request the report Are you Elastic?

Summary

FedRAMP mark, CertReports state Verified as of 31 Oct 2026FedRAMPVerifiedEU-US Data Privacy Framework mark, CertReports state Verified as of 26 Oct 2026DPFVerifiedCCPA / CPRA mark, CertReports state Vendor-stated as of 21 Sep 2026CCPAVendor-stated

Elastic has 2 registry-verified rows and 1 vendor-stated row in the CertReports index, last verified 31 Oct 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 31 Oct 2026, CertReports holds 2 registry-verified rows and 1 vendor-stated row for Elastic, drawn from FedRAMP Marketplace, the Data Privacy Framework list and custom. Elastic is listed in the FedRAMP Marketplace for FedRAMP (FedRAMP Authorized), dated 22 Jul 2020, assessed by Kratos. Elastic states on its trust centre that it holds an CCPA / CPRA privacy notice, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 31 Oct 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.

  • FedRAMP: FedRAMP Authorized, verified as of 31 Oct 2026
  • EU-US Data Privacy Framework: Active: EU-US Certification, SW-US Certification, UK Extension Certification, verified as of 26 Oct 2026
  • CCPA / CPRA: Vendor states CCPA on its trust centre, vendor-stated as of 21 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

2verified rows

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Change history

  1. 22 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  2. 22 Sep 2026Trust centre movedTrust centre URL is now https://www.elastic.co/.
  3. 19 Sep 2026Trust centre movedTrust centre URL is now https://www.elastic.co/trust.

Evidence against regulations

All regulations for Elastic

How much of each regulation’s vendor requirements Elastic’s public evidence reaches.

Reviewing a vendor on public evidence

All articles