Skip to main content
Redis logo

Redis

Security and trust center evidence

Redis is an in-memory key–value database, used as a distributed cache and message broker, with optional durability

redis.ioLast verified 19 Sep 2026
Request the report Are you Redis?

Summary

HIPAA mark, CertReports state Vendor-stated as of 19 Sep 2026HIPAAVendor-statedSOC 2 mark, CertReports state Vendor-stated as of 19 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 19 Sep 2026GDPRVendor-statedPCI DSS mark, CertReports state Vendor-stated as of 19 Sep 2026PCI DSSVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 19 Sep 2026ISO 27001Vendor-statedCSA STAR mark, CertReports state Vendor-stated as of 19 Sep 2026CSA STARVendor-statedISO/IEC 27701 mark, CertReports state Vendor-stated as of 19 Sep 2026ISO 27701Vendor-statedISO/IEC 42001 mark, CertReports state Vendor-stated as of 19 Sep 2026ISO 42001Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 19 Sep 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 19 Sep 2026ISO 27018Vendor-statedISO 22301 mark, CertReports state Vendor-stated as of 19 Sep 2026ISO 22301Vendor-statedCCPA / CPRA mark, CertReports state Vendor-stated as of 19 Sep 2026CCPAVendor-stated

Redis has 12 vendor-stated rows in the CertReports index, last verified 19 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Redis states it holds that it will sign a business associate agreement. Redis states it holds a SOC 2 Type II report. Redis states it holds a data processing agreement. Redis states it holds a PCI DSS attestation of compliance.

  • HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured) (as of 19 Sep 2026)
  • SOC 2: Vendor states SOC 2 Type 2 on its trust centre (as of 19 Sep 2026)
  • GDPR: Vendor states GDPR on its trust centre (as of 19 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

0verified rows

Compliance grid

No public evidence yet for FedRAMP, Cyber Essentials. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (5)

  • AL
    Addendum Legal Notices Library View more Cloud
  • FV
    Fixed version 8.2.3 and above Redis Cloud
  • RC
    Redis Cloud
  • RO
    Remediation of Redis Cloud
  • SM
    Status Monitoring Amazon Web Services Azure