Snowflake
Compliance evidence
Snowflake is a data platform built for the
Compliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 30 Sep 20264 sources
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 30 Sep 20264 sources
FedRAMPVerifiedFedRAMP Authorized
as of 2 Nov 202647 sources · Fortreum, LLC
PCI DSSVendor-statedVendor states PCI-DSS 4.0 on its trust centre
as of 30 Sep 20264 sources
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 30 Sep 20264 sources
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
ISO/IEC 42001Vendor-statedVendor states ISO/IEC 42001:2023 on its trust centre
as of 30 Sep 20264 sources- SOC 1Vendor-stated
Vendor states SOC 1 Type 2 on its trust centre
as of 30 Sep 20264 sources - ISO 9001Vendor-stated
Vendor states ISO/IEC 9001 : 2015 on its trust centre
as of 30 Sep 20264 sources 
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 2 Nov 20263 sources
IRAPVendor-statedVendor states IRAP (Protected) on its trust centre
as of 30 Sep 20264 sources
No public evidence yet for GDPR, Cyber Essentials, ISO 27701. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.