Skip to main content
Neo4j logo

Neo4j

Security and trust center evidence

Neo4j is a graph database management system developed by Neo4j

neo4j.comData platformsLast verified 2 Nov 2026
Request the report Are you Neo4j?

Summary

HIPAA mark, CertReports state Vendor-stated as of 2 Nov 2026HIPAAVendor-statedSOC 2 mark, CertReports state Vendor-stated as of 2 Nov 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 2 Nov 2026GDPRVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 2 Nov 2026ISO 27001Vendor-statedCSA STAR mark, CertReports state Verified as of 26 Oct 2026CSA STARVerifiedSOC 3 mark, CertReports state Vendor-stated as of 2 Nov 2026SOC 3Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 2 Nov 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 2 Nov 2026ISO 27018Vendor-statedEU-US Data Privacy Framework mark, CertReports state Verified as of 2 Nov 2026DPFVerifiedCCPA / CPRA mark, CertReports state Vendor-stated as of 2 Nov 2026CCPAVendor-statedTX-RAMP mark, CertReports state Vendor-stated as of 2 Nov 2026TX-RAMPVendor-stated

Neo4j has 2 registry-verified rows and 9 vendor-stated rows in the CertReports index, last verified 2 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Neo4j states on its trust centre, as of 18 Sep 2026, that it has a SOC 2 Type II report, a SOC 3 report, ISO/IEC 27001:2022, and GDPR compliance. As of 18 Sep 2026, Neo4j also states on its trust centre that it holds ISO/IEC 27017:2015 and ISO/IEC 27018:2019, and that it addresses CCPA/CPRA and TX-RAMP. Neo4j displays a HIPAA badge on its trust centre as of 18 Sep 2026, though BAA availability has not yet been captured. Neo4j is listed in the CSA STAR registry as of 17 Sep 2026 with a STAR Level 1 self-assessment (CAIQ) issued 7 Aug 2025. Neo4j is also listed in the EU-US Data Privacy Framework registry as of 17 Sep 2026, with active EU-US, Swiss-US, and UK Extension certifications issued 17 Dec 2019 and set to expire 11 Aug 2027.

  • HIPAA: vendor displays a badge claim on its trust centre (as of 18 Sep 2026); BAA availability not confirmed.
  • SOC 2: vendor states it holds a SOC 2 Type II report on its trust centre (as of 18 Sep 2026); not independently verified.
  • Listed in the CSA STAR registry (Level 1 self-assessment, issued 7 Aug 2025) and the EU-US Data Privacy Framework registry (active, expires 11 Aug 2027), both as of 17 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 20 Sep 2026; it is regenerated whenever a row changes.

Among data platforms vendors

2verified rows

Category median 0, across 69 indexed data platforms vendors. Neo4j has more verified rows than 84 percent of them.

cloud databasedatabase managementgraph databasenosql

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence
report available

Displayed as a security profile from public statements, not as attestations, as of 2 Nov 2026.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  3. 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  5. 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  6. 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  7. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  8. 18 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.
  9. 18 Sep 2026TX-RAMP evidence addedA TX-RAMP row entered the index with state Vendor-stated.
  10. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Data platforms category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Aerospike logo

Aerospike

Data platforms

Aerospike is the real-time database for AI, trusted in the

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
4 stated2 Nov 2026
Axiom logo

Axiom

Data platforms

The modern machine data platform — Petabyte-scale, schema-less ingest on a fully managed event store, so you keep every byte without the

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
3 stated2 Nov 2026
Segment logo

Segment

Data platforms

Software and APIs to collect, clean, and control customer data.

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-stated
7 stated2 Nov 2026
Polytomic logo

Polytomic

Data platforms

No-code data syncing between your systems

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedCCPA mark, CertReports state Vendor-stated
3 stated21 Sep 2026

Evidence against regulations

All regulations for Neo4j

How much of each regulation’s vendor requirements Neo4j’s public evidence reaches.

Reviewing a vendor on public evidence

All articles