Databricks

Data & Analytics United States Website Reviewed Sept. 2, 2026

Data lakehouse and AI platform for engineering, analytics and machine learning workloads.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Databricks Data Intelligence Platform and supporting ISMS Current
ISO 27017, ISO 27018 and ISO 27701 Accredited third-party certification body Cloud security, PII protection and privacy information management for Databricks Current
SOC 2 Type II Independent third-party auditor Databricks platform; report available to customers under NDA Current
PCI DSS Qualified Security Assessor Databricks in-scope compliance security profile deployments Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
EU and UK regions available; processor under its DPA
PCI DSS v4.0
Partial
Requires the compliance security profile on eligible tiers
HIPAA Security
Partial
HIPAA support available with the compliance security profile and a BAA

Assess Databricks in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.