Summary
HIPAAVendor-stated
SOC 2Vendor-stated
FedRAMPVerified
PCI DSSVendor-stated
ISO 27001Vendor-stated
CSA STARVerified
ISO 42001Vendor-statedSOC 1Vendor-statedISO 9001Vendor-stated
DPFVerified
IRAPVendor-statedSnowflake has 3 registry-verified rows and 8 vendor-stated rows in the CertReports index, last verified 17 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 17 Sep 2026, Snowflake states on its trust centre that it holds SOC 2 Type II, and as of 17 Sep 2026 it also states SOC 1 Type II on its trust centre. As of 17 Sep 2026, Snowflake is listed in the FedRAMP registry as FedRAMP Authorized, with an authorization dated 8 Dec 2023 and audited by Fortreum, LLC. As of 17 Sep 2026, Snowflake is listed in the CSA STAR registry at Level 1 (CAIQ self-assessment) dated 1 Nov 2022. As of 17 Sep 2026, Snowflake is listed in the EU-US Data Privacy Framework registry as active across the EU-US, UK Extension, and Swiss-US certifications, with an expiry date of 29 Oct 2026. As of 17 Sep 2026, Snowflake states on its trust centre that it holds ISO/IEC 27001:2022, ISO/IEC 42001:2023, ISO 9001:2015, PCI DSS 4.0, and IRAP (Protected), and displays a HIPAA badge on its trust centre though BAA availability is not yet captured as of 17 Sep 2026.
- FedRAMP: listed in FedRAMP registry as Authorized, issued 8 Dec 2023, auditor Fortreum LLC (as of 17 Sep 2026).
- EU-US Data Privacy Framework: listed in DPF registry as active (EU-US, UK Extension, Swiss-US), expiring 29 Oct 2026 (as of 17 Sep 2026).
- HIPAA: vendor displays a HIPAA badge on its trust centre, but BAA availability not yet captured (as of 17 Sep 2026).
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.
Among data platforms vendors
3verified rows
Category median 0, across 87 indexed data platforms vendors. Snowflake has more verified rows than 99 percent of them.
cloud analyticsdata storagedata warehousesql querying
Compare with similar vendors
Pick your own comparisonCompliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 17 Sep 20261 source - SOC 2Vendor-stated
Vendor states SOC 2 Type 2 on its trust centre
as of 17 Sep 20261 source - FedRAMPVerified
FedRAMP Authorized
as of 17 Sep 20261 source · Fortreum, LLC - PCI DSSVendor-stated
Vendor states PCI-DSS 4.0 on its trust centre
as of 17 Sep 20261 source - ISO/IEC 27001Vendor-stated
Vendor states ISO/IEC 27001:2022 on its trust centre
as of 17 Sep 20261 source - CSA STARVerified
STAR Level 1 self-assessment (CAIQ)
as of 17 Sep 20261 source - ISO/IEC 42001Vendor-stated
Vendor states ISO/IEC 42001:2023 on its trust centre
as of 17 Sep 20261 source - SOC 1Vendor-stated
Vendor states SOC 1 Type 2 on its trust centre
as of 17 Sep 20261 source - ISO 9001Vendor-stated
Vendor states ISO/IEC 9001 : 2015 on its trust centre
as of 17 Sep 20261 source - EU-US Data Privacy FrameworkVerified
Active: UK Extension Certification, EU-US Certification, SW-US Certification
as of 17 Sep 20261 source - IRAPVendor-stated
Vendor states IRAP (Protected) on its trust centre
as of 17 Sep 20261 source
No public evidence yet for GDPR, Cyber Essentials, ISO 27701. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Change history
- 17 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 17 Sep 2026IRAP evidence addedA IRAP row entered the index with state Vendor-stated.
- 17 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 17 Sep 2026ISO/IEC 42001 evidence addedA ISO/IEC 42001 row entered the index with state Vendor-stated.
- 17 Sep 2026ISO 9001 evidence addedA ISO 9001 row entered the index with state Vendor-stated.
- 17 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.
- 17 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
- 17 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Data platforms category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
