Certificate Authority Service security and compliance
Security
Certificate Authority Service supports the following Google Cloud security products:
- VPC Service Controls (VPC-SC)
- Access Transparency
- Access Approval
- Workforce identity federation
- Data residency
For information about the security measures in place for Google Cloud services, see Google Cloud Security.
Compliance
Certificate Authority Service meets the following compliance standards:
- ISO 27001
- ISO 27017
- ISO 27018
- SOC1
- SOC2
- SOC3
- VPAT
- PCI DSS
- Cloud Computing Compliance Controls Catalog (C5)
- FedRAMP Moderate
- IRAP
- HIPAA
- CJIS
- ITAR
You can read more about Google Cloud compliance on the Compliance resource center.