MicroStrategy

Security and trust center evidence

Founded in 1989, MicroStrategy (Nasdaq: MSTR) is a leading worldwide provider of enterprise software

microstrategy.com AnalyticsLast verified 1 Nov 2026

Vendor website Are you MicroStrategy?

FedRAMPVerified

CSA STARVerified

MicroStrategy has 2 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

MicroStrategy is listed in the FedRAMP registry as FedRAMP Authorized, as of 20 Sep 2026. That FedRAMP authorization was issued 17 Nov 2022 and audited by A-LIGN Compliance and Security, Inc. dba A-LIGN, as of 20 Sep 2026. MicroStrategy is also listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ), as of 17 Sep 2026. That CSA STAR entry was issued 1 Nov 2013, as of 17 Sep 2026, and reflects a self-assessment rather than a third-party audit. No public evidence beyond these two registry listings was found for MicroStrategy, as of 20 Sep 2026.

FedRAMP: listed in the FedRAMP registry as FedRAMP Authorized, issued 17 Nov 2022, audited by A-LIGN, as of 20 Sep 2026.
CSA STAR: listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ), issued 1 Nov 2013, as of 17 Sep 2026.
No public evidence found for other frameworks for MicroStrategy, as of 20 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 20 Sep 2026; it is regenerated whenever a row changes.

Among analytics vendors

2verified rows

Category median 0, across 275 indexed analytics vendors. MicroStrategy has more verified rows than 93 percent of them.

business intelligencedashboardsdata visualizationembedded analytics

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, PCI DSS, ISO 27001, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.