Trust Platform Certification Reports and Resources | DigitalOcean

Featured AI Products
Build, deploy, and scale cloud compute resources
Containers and Images
Safely store and manage containers and backups
Fully managed resources running popular database engines
Management and Dev Tools
Control infrastructure and gather insights
Secure and control traffic to apps
Help protect your account and resources with these security features
Store and access any amount of data reliably in the cloud
Security and Networking
Web and App Platforms
Download certification reports to understand how independent auditors have vetted our processes.
DigitalOcean maintains a SOC 2 Type II and SOC 3 Type II certification, issued by our independent auditor, Schellman & Company. By achieving compliance with this globally recognized information security controls framework, DigitalOcean demonstrates a commitment to protecting sensitive customer and company information.
Through our CIS Foundations and CIS Services Benchmarks, we empower our customers with actionable resources to better secure their infrastructure. And, because CIS Benchmarks are aligned to various security frameworks by design, customers can reference our Benchmarks as a resource for their respective compliance programs.
DigitalOcean maintains compliance with rigorous privacy and data protection standards, as evidenced by our Global Privacy Recognition for Processors (Global PRP) certification. With this certification, DigitalOcean demonstrates our commitment to prioritizing security and confidentiality in data processing operations to maintain trust with our customers.
DigitalOcean maintains a Zero-Footprint data policy by way of our PCI-DSS SAQ-A validation. Through our attestation, DigitalOcean commits to not storing, processing, or transmitting cardholder data within our administrative environment.
DigitalOcean has achieved Cloud Security Alliance (CSA) STAR Level 1 which addresses fundamental security principles across 16 domains to help cloud customers assess the overall security risk of our services.
If you have other compliance-related questions, please reach out to trust@digitalocean.com.
Like all cloud computing companies, we occasionally receive requests from government agencies regarding one of the servers in our network. To protect our customers, our policy is to fully (and transparently) comply with the legal process, provided that it is legally valid with respect to where the data in question resides.
We stand with our customers when governments ask us for data. We don't disclose user content to law enforcement without proper legal process and we inform users about government data requests unless legally prevented. Our transparency reports outline the requests we receive from law enforcement agencies and explain our commitment to being responsible cloud providers.
Read all available reports
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
© 2026 DigitalOcean, LLC.