Proofpoint

Cybersecurity United States Website Reviewed Sept. 2, 2026

Email security, data loss prevention, insider threat management and security awareness training.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body Proofpoint cloud services and supporting ISMS — — Current
ISO 27018 Accredited third-party certification body Protection of PII in public cloud for in-scope Proofpoint services — — Current
SOC 2 Type II Independent third-party auditor Proofpoint email protection and archiving; report available under NDA — — Current
FedRAMP US federal authorising body Proofpoint offerings authorised for US federal use — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
EU and UK data residency available; processor under its DPA
HIPAA Security
Partial
HIPAA support available for eligible services with a BAA

Assess Proofpoint in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register