Certifications

Certification reports

For access to our SOC 2 Type II Report and Data Center Certifications (ISO 27001, SOC, PCI-DSS), please visit our Security Reports & Certifications Center. Note: DigitalOcean Account login is required to access these reports.

DigitalOcean’s SOC 2 Type II and SOC 3 Type II

DigitalOcean is AICPA SOC 2 Type II and SOC 3 Type II certified. By achieving compliance with this globally recognized information security controls framework, audited by our independent auditor (Schellman & Company LLC), DigitalOcean has demonstrated a commitment to protecting sensitive customer and company information.

To view our SOC 3 Type II report, please click here: DigitalOcean SOC 3 Type II Report

DigitalOcean’s CSA Self-Assessment

Additionally, DigitalOcean has achieved Cloud Security Alliance (CSA) STAR Level 1 which addresses fundamental security principles across 16 domains to help cloud customers assess the overall security risk of a cloud service.

Please review our CSA self-assessment.

Certifications & The Shared Responsibility Model

DigitalOcean has a Shared Responsibility Model with our customers and as such, the certifications on this page cover different aspects of DigitalOcean’s service which are detailed below:

• DigitalOcean SOC 2 Type II - Controls that address the 2017 Trust Services Criteria for Security, Availability, Processing, Integrity, Confidentiality, and Privacy of DigitalOcean’s products and services
• Data Center Certifications - Reports received from the collocated data centers that detail the physical and asset security of DigitalOcean’s infrastructure. All of our collocated data centers are independently audited, and many are certified by internationally recognized attestation and certification compliance standards.

If you have other compliance-related questions, please reach out to privacy@digitalocean.com.