--- title: Security & Compliance | ZITADEL Knowledge Base description: Understand how the platform keeps your data secure. Learn about encryption, audit logs, compliance standards, and security best practices. --- [Skip to content](https://help.zitadel.com/security-compliance#main-content) [![zitadel-logo\_text-dark (1)](https://help.zitadel.com/hs-fs/hubfs/zitadel-logo_text-dark%20(1).png?width=210&height=60&name=zitadel-logo_text-dark%20(1).png)](https://help.zitadel.com/) Open main navigation Close main navigation - [Documentation](https://zitadel.com/docs) [Documentation](https://zitadel.com/docs) How can we help you? - There are no suggestions because the search field is empty. 1. [ZITADEL Knowledge Base](https://help.zitadel.com/) 2. [Security & Compliance](https://help.zitadel.com/security-compliance) # Security & Compliance Understand how the platform keeps your data secure. Learn about encryption, audit logs, compliance standards, and security best practices. - [Zitadel and the US CLOUD Act](https://help.zitadel.com/zitadel-us-cloud-act-data-sovereignty) - [Which security and privacy certifications or attestations does Zitadel maintain?](https://help.zitadel.com/security-compliance/certifications-and-compliance) - [How can I report a vulnerability or security issue?](https://help.zitadel.com/how-can-i-report-a-vulnerability-or-security-issue) - [Is Zitadel compliant to BSI Cloud Computing Compliance Criteria Catalogue (C5)?](https://help.zitadel.com/is-zitadel-compliant-to-bsi-cloud-computing-compliance-criteria-catalogue-c5) - [Do you provide Zitadel's ISO27001 Certificate?](https://help.zitadel.com/do-you-provide-zitadel-iso27001-certificate) - [Is there a compliance roadmap addressing upcoming regulations?](https://help.zitadel.com/is-there-a-compliance-roadmap-addressing-upcoming-regulations) - [How do you protect against bot and DDoS attacks?](https://help.zitadel.com/how-do-you-protect-against-bot-and-ddos-attacks) - [How can I get informed about security advisories?](https://help.zitadel.com/how-can-i-get-informed-about-security-advisories) - [Do you sign a HIPAA Business Associate Agreement (BAA)?](https://help.zitadel.com/do-you-sign-a-hipaa-business-associate-agreement-baa) - [How can I get a bilaterally signed DPA?](https://help.zitadel.com/how-can-i-get-a-bilaterally-signed-dpa) - [Want to report a potential security issue?](https://help.zitadel.com/want-to-report-a-potential-security-issue) - [Security Best Practices: Validating Audience (aud) Claims in ZITADEL Access Tokens](https://help.zitadel.com/security-best-practices-validating-audience-aud-claims-in-zitadel-access-tokens) - [Do you do regular penetration testing?](https://help.zitadel.com/do-you-do-regular-penetration-testing) See less ▼ - [Getting Started](https://help.zitadel.com/getting-started) - [User Management](https://help.zitadel.com/user-management) - [Authentication & Login](https://help.zitadel.com/authentication-login) - [Security & Compliance](https://help.zitadel.com/security-compliance) - [Troubleshooting](https://help.zitadel.com/troubleshooting) - [Account & Subscription](https://help.zitadel.com/account-subscription#main-content) - [Support](https://help.zitadel.com/account-subscription#support) - [Billing (Pro)](https://help.zitadel.com/account-subscription#billing-pro) - [Billing (Enterprise)](https://help.zitadel.com/account-subscription#billing-enterprise) - [Zitadel Cloud Account](https://help.zitadel.com/account-subscription#zitadel-cloud-account) - [Service Description](https://help.zitadel.com/account-subscription#service-description) - [Default Settings](https://help.zitadel.com/default-settings#main-content) - [Web Keys](https://help.zitadel.com/default-settings#web-keys) - [Self-Hosting](https://help.zitadel.com/self-hosting) [![zitadel-logo\_text-dark](https://help.zitadel.com/hs-fs/hubfs/zitadel-logo_text-dark.png?width=210&height=60&name=zitadel-logo_text-dark.png "zitadel-logo_text-dark")](http://zitadel.com) 1 Embarcadero Center, Suite 1200 San Francisco, CA 94111 Copyright © 2025 All rights reserved.