Compliance

GDPR
Auth0 is GDPR ready. Auth0 provides information to its customers to help them understand how features and functionality of the Auth0 platform may affect their GDPR compliance obligations.
- How Auth0 can help with GDPR
Privacy Shield
Auth0 is certified under the Privacy Shield Program, specifically the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework. You can find further details on our Privacy page.
- Auth0's Privacy Shield Registration
HIPAA & HITECH
Auth0 is considered a Business Associate as defined by the US HIPAA and HITECH legislation.

For Auth0 customers who qualify as a Covered Entity under US HIPAA legislation and related legislation and regulations and who provide ePHI (electronic Protected Health Information) to Auth0 as part of the Auth0 user profile, Auth0 may qualify as a business associate. Auth0 can provide its Business Associate Agreement to such customers upon request.
SOC 2
Auth0 undergoes a SOC 2 Type II audit by an independent auditor annually. This audit covers our product, infrastructure, and policies. The SOC 2 Type II Audit Report is available to enterprise level customers upon request with a non-disclosure agreement (NDA) signed by a corporate officer authorized to represent the company. To request the report, please contact your assigned Technical Account Manager.
CSA STAR
Auth0 is CSA STAR certified. Auth0's CSA Consensus Assessments Initiative Questionnaire (CAIQ) is available in our Support Center. You can also view our CAIQ and STAR Certificate in the CSA STAR Registry.
ISO 27001/27018
Auth0 undergoes an ISO 27001/27018 audit by an independent auditor annually. Our ISO 27001/27018 certificate is available in our Support Center. We can also share our Statement of Applicability (SOA) upon request with a non-disclosure agreement (NDA) signed by a corporate officer authorized to represent the company. To request the SOA, please contact your assigned Technical Account Manager.
PCI DSS
PCI certification is available as an add-on for Auth0's Private Cloud deployment model. Auth0 undergoes a PCI audit by an independent auditor annually. Our Attestation of Compliance (AOC) is available upon request. To request the AOC, please contact your assigned Technical Account Manager.

Auth0 will document additional compliance frameworks and certifications on this page when available.

For information on compliance with technical specifications for authentication, please see Protocols.

Docs

Compliance

Compliance Frameworks and Certifications

Future

Specifications

Was this article helpful?

Compliance

Data Privacy

Compliance Frameworks and Certifications

Future

Specifications

Was this article helpful?