Compliance frameworks followed by Cumulocity

Cumulocity offers an enterprise-grade AIoT platform that connects & manages assets efficiently, transforms raw device data into AI-ready data, and orchestrates innovation from cloud to edge, combined with a team of experts and a large ecosystem of device, technology, and implementation partners to achieve lasting customer success.

Cumulocity recognises that the confidentiality, integrity, and availability of information and data created, maintained, and hosted by us are vital to the success of the business and privacy of our partners. We understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Cumulocity so that our customers can feel confident in choosing us as a trusted provider.

This portal serves as your Trust Center, providing a central hub for easy access to Cumulocity's security and compliance information. If you have any questions, please feel free to contact us at trustcenter-admin@cumulocity.com

Compliances (5)

Here are the compliance frameworks that Cumulocity follows which showcases our adherence to industry-standard security guidelines and practices.

ISO 27001

Compliant

A globally recognized standard for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).

ISO 9001

Compliant

ISO 9001 is a globally recognized standard for quality management. It helps organizations of all sizes and sectors to improve their performance, meet customer expectations and demonstrate their commitment to quality.

ISO 22301

Compliant

Specifies requirements for a management system to protect against, reduce the likelihood of, and ensure your organization recovers from disruptive incidents.

SOC2+HIPAA

Compliant

This is a SOC2 report. SOC2 is a voluntary compliance standard for service organizations, developed by the American Institute of CPAs (AICPA), which specifies how organizations should manage customer data. The standard is based on the following Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.

SOC3+HIPAA

Compliant

This is a SOC3 + HIPAA 2025 report. SOC3 is a voluntary compliance standard for service organizations, developed by the American Institute of CPAs (AICPA), which specifies how organizations should manage customer data. The standard is based on the following Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.

Start your compliance journey today | Powered by