Couchbase Trust Center
The Couchbase Trust Center provides documentation of our security architecture, compliance certifications, privacy practices, and shared responsibility model for all Couchbase products. Couchbase is committed to your organization’s security and data protection at every level.
Our security approach
Couchbase security is a team effort. It begins with top-down policies from management and extends to the development of secure products by our engineers, management of governance and compliance by our information security team, and shared responsibilities across all our business units.
Built-in security protects your modern enterprise
Verify
Role-based access controls ensure only authorized users or applications have access to data.
Enforce
Enforcement of least privilege access is applied to all credentials and secrets, ensuring strict access controls to sensitive data and actions.
Monitor
To prevent potential breaches, Capella implements a managed cloud intrusion detection system that involves 24×7 monitoring.
Modernize
Capella is built using modern DBaaS principles and secure development practices.
コンプライアンス
SOC
Couchbase Capella successfully completed a SOC 2 Type II audit and received an independent auditor’s report examining Capella’s security, availability, and confidentiality controls.
ISO/IEC 27001:2022
Couchbase Capella successfully completed ISO 27001, 27017, and 27018 independent audits, with our robust security, privacy, and cloud data protection controls. ISO 27001 is a global standard for information security and reducing data breach risks.
HIPAA
The Couchbase security framework encompasses data encryption and many other key elements to secure and protect data in transit and at rest within the payment card ecosystem. Couchbase Capella has achieved PCI DSS 4.0 attestation of compliance.
PCI DSS
An independent review allows Couchbase Capella to be used with HIPAA-compliant applications. Please contact us to execute the required Business Associate Agreement (BAA) for this purpose.
GDPR
Couchbase works closely with European products and services customers to help them enable their GDPR compliance and meet their data privacy and regulatory requirements.
CSA STAR
Through an external security audit, Couchbase Capella has successfully completed a CSA STAR Level 2 certification for attestation of compliance. The CSA STAR Level 2 certification underscores our dedication to exceeding security benchmarks.
HDS
Capella has achieved Hébergement de Données de Santé (HDS), a French data protection standard for hosting and processing health data. Verified by Schellman, confirming Capella meets all HDS requirements. Contact us to request the certification.
コンプライアンス
The Couchbase information security team has established a robust security program based on Couchbase’s identified risks, industry standards, and best practices (e.g., CIS Critical Security Controls, ISO 27002, NIST SP 800-53, and SSAE 18 SOC 2 Trust Principles).
-
SOC 2
Couchbase Capella successfully completed a SOC 2 Type II audit and received an independent auditor’s report examining Capella’s security, availability, and confidentiality controls. You can request a copy of the report from our team.
-
ISO/IEC 27001:2022
Couchbase Capella successfully completed ISO 27001, 27017, and 27018 independent audits, with our robust security, privacy, and cloud data protection controls. ISO 27001 is a global standard for information security and reducing data breach risks. Request the certifications これ.
-
PCI DSS
The Couchbase security framework encompasses data encryption and many other key elements to secure and protect data in transit and at rest within the payment card ecosystem. Couchbase Capella has achieved PCI DSS 4.0 attestation of compliance.
-
HIPAA
An independent review allows Couchbase Capella to be used with HIPAA-compliant applications. Please contact us to execute the required Business Associate Agreement (BAA) for this purpose.
-
GDPR
Couchbase works closely with European products and services customers to help them enable their GDPR compliance and meet their data privacy and regulatory requirements.
-
CSA STAR
Through an external security audit, Couchbase Capella has successfully completed a CSA STAR Level 2 certification for attestation of compliance. The CSA STAR Level 2 certification underscores our dedication to exceeding security benchmarks.
-
HDS Certification
Capella has achieved Hébergement de Données de Santé (HDS), a French data protection standard for hosting and processing health data. Verified by Schellman, confirming Capella meets all HDS requirements. Contact us to request the certification.
お客様
お客様の声
-
「カペラを通じてクラウドのパワーを活用することで、複数の地域でアプリケーションを迅速かつシームレスに並行して展開することができました。
チョ・ジェボム, Director of Game Infrastructure, Nexon20
新地域立ち上げのための議事録
-
“This is the second solution MOLO17 delivers in the emergency rescue field, and both use Couchbase technologies.”
ダニエレ・アンジェリ, Founder & CEO, MOLO17100%
救助に成功したボートの割合
-
“Capella’s impressive price-performance and edge capabilities give our developer team a more agile experience and allow our clients’ apps to remain synced.”
ヴィギャン・カウシク, Co-founder and CEO, Quantic50%
クエリー時間の短縮
-
「Capellaのおかげで、何百万人ものプレーヤーが、プロファイルデータを失うことなく、自分の好きなデバイスを使うことができ、中断することなく一貫した体験をすることができます。
Lars Schmeller, Team Lead, Lotum800
全世界で100万ダウンロード
Security resources
-
ホワイトペーパー
Couchbase Capellaのセキュリティとデータ保護
-
ドキュメント
Couchbaseによるデータ保護とセキュリティのベストプラクティス
-
ウェブページ
Critical alerts and advisories for Couchbase
Trust Center FAQ
Find answers to common questions about Couchbase security certifications, compliance standards, data privacy, and shared responsibility below.
Yes. Couchbase Capella completed a SOC 2 Type II audit covering security, availability, and confidentiality controls.
An independent review allows Couchbase Capella to be used with HIPAA-compliant applications. お問い合わせ to execute the required Business Associate Agreement (BAA) for your deployment.
Couchbase Capella holds SOC 2 Type II, ISO 27001/27017/27018, PCI DSS 4.0, HIPAA, GDPR, CSA STAR Level 2, and HDS certifications.
Couchbase is committed to transparency in how it collects, uses, and protects data. See the Couchbase プライバシーポリシー for full details on data handling across all products and services.
Couchbase manages platform security, infrastructure, and compliance controls. Customers are responsible for some initial configuration and ongoing security administration.