What is ISO 27018? Which SaaS Vendors Are Certified? | Compliance Posture

What is ISO 27018?

International standard for protecting personally identifiable information (PII) in public cloud environments.

ISO 27018 (Cloud Privacy) is tracked across the 422 vendors in our directory. Buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary. Most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official ISO 27018 program ↗.

Vendors with ISO 27018

113

Analytics

Adobe Analytics 9/32

Amplitude 12/32

Artificial Intelligence

Weights & Biases 5/32

Communication

Cisco Webex 18/32

Microsoft Teams 21/32

RingCentral 10/32

Customer Support

Zoho Desk 10/32

Data Engineering

Databricks 16/32

Snowflake 19/32

Design & Creative

Adobe Creative Cloud 11/32

DevOps & Monitoring

Google Apigee 10/32

MongoDB Atlas 17/32

OutSystems 4/32

ServiceNow 17/32

E-Commerce

Adobe Commerce 9/32

BigCommerce 14/32

Education & Learning

Blackboard 5/32

LinkedIn Learning 4/32

ERP & Operations

Microsoft Dynamics 365 15/32

Oracle ERP Cloud 10/32

Oracle NetSuite 7/32

SAP S/4HANA 7/32

Finance & Payments

Governance, Risk & Compliance

HR & People Ops

Cornerstone OnDemand 12/32

Infrastructure & Cloud

Amazon Web Services 21/32

Cloudflare 20/32

Elasticsearch 8/32

Google Cloud Platform 23/32

Microsoft Azure 23/32

Redis Cloud 12/32

Marketing

Optimizely 7/32

Productivity & Docs

Adobe Acrobat 12/32

Confluence 16/32

Dropbox Sign 8/32

Google Workspace 16/32

Grammarly 11/32

Microsoft 365 21/32

Microsoft OneNote 15/32

Project Management

Monday.com 17/32

Sales & CRM

Salesforce 27/32

Security

Bitdefender 8/32

Cybereason 9/32

Orca Security 10/32

Ping Identity 3/32

SentinelOne 8/32

Websites & CMS

Partial or conditional

3

These vendors meet it under specific conditions. Hover a card for the condition, or see their profiles.

Linode Referenced in Linode community posts 0/32

Google Analytics Google's ISO 27018 certification covers Google Cloud Platform, Google Workspace, and Apigee. Google Analytics is not in the certified scope 6/32

Firebase Certified for a subset of Firebase services 7/32

Not certified

13

Design & Creative

DevOps & Monitoring

Finance & Payments

HR & People Ops

Infrastructure & Cloud

Project Management

Sales & CRM

293 unverified

For these vendors, ISO 27018 status is not publicly documented. That does not mean they lack the certification.

15Five 8x8 A-LIGN Acronis ActiveCampaign Acumatica ADP Adyen Affirm Afterpay Ahrefs Airbyte Airtable Airwallex Akamai Alchemer Anthropic AppDynamics Applitools Avalara Backblaze BambooHR Basecamp Bench Accounting Betterworks Betty Blocks Bitwarden BlueJeans Braintree Braze Brevo BrowserStack Bubble Buffer Bugsnag Campaign Monitor Canva Carbonite Ceridian Dayforce Certinia Chargebee Check Point Checkmarx Checkout.com Chorus.ai CircleCI Cisco Duo Clari Clay Clerk Clio Close Cohere ConnectWise Constant Contact Contentful ContractPodAi Copper Coursera for Business Craft Crazy Egg CrowdStrike Culture Amp Cypress.io Dashlane Datto RMM Discord Divvy Drift Drupal (Acquia)Druva Ecwid Epicor ESET Evernote Expensify Fastly Fivetran Flexport Fly.io Formstack Framer FreshBooks Freshdesk Freshsales Freshservice Front GitGuardian GitLab Gladly Glide GoCardless Gorgias GoTo Meeting Grafana Cloud Grasshopper Greenhouse Groove Groq Height Help Scout Honeycomb Hootsuite Hotjar HubSpot HubSpot CMS Hugging Face Hyperproof iCIMS IFS Infor Informatica Insightly Instapage Instructure Canvas InVision Iterable Ivanti JazzHR Jenkins JFrog Jira Service Management Jotform JumpCloud Juro Justworks Kaseya Kayako Keap Keeper Security Kentico Klarna Klaviyo Kong Kustomer Lacework Laika LambdaTest LangSmith LastPass Later Lattice LaunchDarkly LawPay Lever LiveChat LogicGate LogRocket Loom Lucidchart Lusha Mailchimp MailerLite Make Malwarebytes ManageEngine Marqeta MetricStream Mimecast Mistral AI Mixpanel Motive Moz MuleSoft MyCase n8n Namely New Relic Nimble CRM NinjaOne Odoo Omnisend OneLogin OneTrust Onfleet Oracle Eloqua Outreach Palo Alto Networks PandaDoc Paychex Paylocity PayPal Pendo Perplexity AI Personio Pilot.com Pinecone Plaid PlanetScale Podio PostHog Postman PracticePanther PrestaShop project44 ProofHub Proofpoint Qualtrics Qualys QuickBooks Online Railway Rapid7 Re:amaze Recharge Recurly Remote.com Render Resend Resolver Retool Revolut Business Rollbar RSA Archer Rubrik Sage Intacct Salesforce Pardot Salesloft Samsara Sanity.io Sauce Labs Scale AI Scytale Seamless.ai Secureframe Semgrep Semrush Sentry SharpSpring ShipBob ShipStation Shopware Shortcut Sisense Sitecore Sketch Skillsoft SmartRecruiters Smartsheet Snyk Softr SolarWinds SonarQube Sophos Sprinto Sprout Social Square Squarespace Strapi SugarCRM Supabase SurveyMonkey Symantec Tableau Tailscale TalentLMS TaxJar Teamwork.com Tenable TestRail Thoropass ThoughtSpot Tidio Tipalti Todoist Together AI Travis CI Trend Micro TriNet TrustArc Tyk Udemy Business Unbounce Vanta Veracode Vimeo VMware Carbon Black Volusion Vonage VWO Wasabi Wave Accounting Weaviate Whereby Wire Wise WooCommerce WordPress VIP Workable WorkOS WP Engine Xero Zapier ZoomInfo

Browse by category

Don't see a vendor you need? Submit it

Compliance Posture

Check any SaaS vendor's security and compliance posture across 32 frameworks, all in one place.

Categories

Frameworks

Site

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026