MongoDB

Data & Analytics United States Website Reviewed Sept. 2, 2026

Document database and MongoDB Atlas managed cloud service with EU and UK regions.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body MongoDB Atlas and supporting ISMS Current
ISO 27017 and ISO 27018 Accredited third-party certification body Cloud security controls and protection of PII in public cloud for Atlas Current
SOC 2 Type II Independent third-party auditor MongoDB Atlas; report available to customers under NDA Current
PCI DSS Qualified Security Assessor MongoDB Atlas as a service provider for in-scope customer deployments Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
EU and UK Atlas regions available; processor under its DPA
PCI DSS v4.0
Partial
Atlas is a PCI DSS compliant service provider for eligible clusters
HIPAA Security
Partial
HIPAA BAA available for eligible Atlas deployments

Assess MongoDB in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.