
Enterprise Compliance
As far as we're concerned, fines are not fine, so we don’t stop at industry standards for compliance. We have a comprehensive list of certifications for highly-regulated industries, and we’re the only Drupal platform that’s FedRAMP authorized.
More than Your Standard Compliance





fedramp
Compliance certification and details on authorizing agencies can be viewed in the FedRAMP Marketplace.

hipaa
Meets the requirements for HIPAA Security Rule and HITECH for electronic Protected Health Information (ePHI).

Payment Card Industry Data Security Standard
Compliant hosting platform to ensure the protection of cardholder data in accordance with PCI-DSS version 3.2.

Federal Education Records Privacy Act
Multi-layered cloud security controls, configurable permissions, and built-in backups and disaster recovery
Built with Compliance Standards





Service Organization Control (SOC 1) Type I
Multi-layered cloud security controls, configurable permissions, and built-in backups and disaster recovery.

Service Organization Control (SOC 2) Type II
Includes an assessment against the Common Criteria principles of Security, Availability, and Confidentiality.

SSH Access
Keys provide a more secure method of signing in and allows for multiple keys, each with their own unique name.

ISO 27001
Globally recognized security standard driven by the implementation of information security management system.
Future proof your compliance
Compliance standards are constantly changing and evolving. Acquia's dedicated compliance team is committed to staying on top of the changing landscape of compliance standards that your organization needs to meet industry standards and expectations.


More on Acquia Edge
Acquia Edge CDN and Security are the fastest and most secure technologies to support your digital experience.
Enterprise Security
It’s more than security. It’s revenue protection. Keep your experience and customer data safe with a platform designed to meet your organization’s needs. Acquia provides best-in-class security as a service to protect your data from attacks.
