Certificate Authority Service security and compliance

Security

Certificate Authority Service supports the following Google Cloud security products:

• VPC Service Controls (VPC-SC)
• Access Transparency
• Access Approval
• Workforce identity federation
• Data residency

For information about the security measures in place for Google Cloud services, see Google Cloud Security.

Compliance

Certificate Authority Service meets the following compliance standards:

• ISO 27001
• ISO 27017
• ISO 27018
• SOC1
• SOC2
• SOC3
• VPAT
• PCI DSS
• Cloud Computing Compliance Controls Catalog (C5)
• FedRAMP Moderate and FedRAMP High
• IRAP
• HIPAA
• CJIS
• ITAR

You can read more about Google Cloud compliance on the Compliance resource center.