Couchbase Trust Center
The Couchbase Trust Center provides documentation of our security architecture, compliance certifications, privacy practices, and shared responsibility model for all Couchbase products. Couchbase is committed to your organization’s security and data protection at every level.
Our security approach
Couchbase security is a team effort. It begins with top-down policies from management and extends to the development of secure products by our engineers, management of governance and compliance by our information security team, and shared responsibilities across all our business units.
Built-in security protects your modern enterprise
Verify
Role-based access controls ensure only authorized users or applications have access to data.
Enforce
Enforcement of least privilege access is applied to all credentials and secrets, ensuring strict access controls to sensitive data and actions.
Monitor
To prevent potential breaches, Capella implements a managed cloud intrusion detection system that involves 24×7 monitoring.
Modernize
Capella is built using modern DBaaS principles and secure development practices.
Conformidade
SOC
Couchbase Capella successfully completed a SOC 2 Type II audit and received an independent auditor’s report examining Capella’s security, availability, and confidentiality controls.
ISO/IEC 27001:2022
Couchbase Capella successfully completed ISO 27001, 27017, and 27018 independent audits, with our robust security, privacy, and cloud data protection controls. ISO 27001 is a global standard for information security and reducing data breach risks.
HIPAA
The Couchbase security framework encompasses data encryption and many other key elements to secure and protect data in transit and at rest within the payment card ecosystem. Couchbase Capella has achieved PCI DSS 4.0 attestation of compliance.
PCI DSS
An independent review allows Couchbase Capella to be used with HIPAA-compliant applications. Please contact us to execute the required Business Associate Agreement (BAA) for this purpose.
GDPR
Couchbase works closely with European products and services customers to help them enable their GDPR compliance and meet their data privacy and regulatory requirements.
CSA STAR
Through an external security audit, Couchbase Capella has successfully completed a CSA STAR Level 2 certification for attestation of compliance. The CSA STAR Level 2 certification underscores our dedication to exceeding security benchmarks.
HDS
Capella has achieved Hébergement de Données de Santé (HDS), a French data protection standard for hosting and processing health data. Verified by Schellman, confirming Capella meets all HDS requirements. Contact us to request the certification.
Conformidade
The Couchbase information security team has established a robust security program based on Couchbase’s identified risks, industry standards, and best practices (e.g., CIS Critical Security Controls, ISO 27002, NIST SP 800-53, and SSAE 18 SOC 2 Trust Principles).
-
SOC 2
Couchbase Capella successfully completed a SOC 2 Type II audit and received an independent auditor’s report examining Capella’s security, availability, and confidentiality controls. You can request a copy of the report from our team.
-
ISO/IEC 27001:2022
Couchbase Capella successfully completed ISO 27001, 27017, and 27018 independent audits, with our robust security, privacy, and cloud data protection controls. ISO 27001 is a global standard for information security and reducing data breach risks. Request the certifications aqui.
-
PCI DSS
The Couchbase security framework encompasses data encryption and many other key elements to secure and protect data in transit and at rest within the payment card ecosystem. Couchbase Capella has achieved PCI DSS 4.0 attestation of compliance.
-
HIPAA
An independent review allows Couchbase Capella to be used with HIPAA-compliant applications. Please contact us to execute the required Business Associate Agreement (BAA) for this purpose.
-
GDPR
Couchbase works closely with European products and services customers to help them enable their GDPR compliance and meet their data privacy and regulatory requirements.
-
CSA STAR
Through an external security audit, Couchbase Capella has successfully completed a CSA STAR Level 2 certification for attestation of compliance. The CSA STAR Level 2 certification underscores our dedication to exceeding security benchmarks.
-
HDS Certification
Capella has achieved Hébergement de Données de Santé (HDS), a French data protection standard for hosting and processing health data. Verified by Schellman, confirming Capella meets all HDS requirements. Contact us to request the certification.
CLIENTES
O que os clientes estão dizendo
-
"Aproveitar o poder da nuvem por meio da Capella nos permitiu implantar aplicativos em várias regiões em paralelo, de forma rápida e perfeita."
Jae Beom Cho, Director of Game Infrastructure, Nexon20
minutos para lançar novas regiões
-
“This is the second solution MOLO17 delivers in the emergency rescue field, and both use Couchbase technologies.”
Daniele Angeli, Founder & CEO, MOLO17100%
de barcos resgatados com sucesso
-
“Capella’s impressive price-performance and edge capabilities give our developer team a more agile experience and allow our clients’ apps to remain synced.”
Vigyan Kaushik, Co-founder and CEO, Quantic50%
redução no tempo de consulta
-
"Com a Capella, milhões de jogadores podem usar os dispositivos de sua escolha sem perder dados de perfil e ter uma experiência consistente sem interrupções."
Lars Schmeller, Team Lead, Lotum800
milhões de downloads em todo o mundo
Security resources
-
Whitepaper
Segurança e proteção de dados do Couchbase Capella
-
DOCUMENTAÇÃO
Práticas recomendadas para proteção e segurança de dados com o Couchbase
-
Página da Web
Critical alerts and advisories for Couchbase
Trust Center FAQ
Find answers to common questions about Couchbase security certifications, compliance standards, data privacy, and shared responsibility below.
Yes. Couchbase Capella completed a SOC 2 Type II audit covering security, availability, and confidentiality controls.
An independent review allows Couchbase Capella to be used with HIPAA-compliant applications. Entre em contato conosco to execute the required Business Associate Agreement (BAA) for your deployment.
Couchbase Capella holds SOC 2 Type II, ISO 27001/27017/27018, PCI DSS 4.0, HIPAA, GDPR, CSA STAR Level 2, and HDS certifications.
Couchbase is committed to transparency in how it collects, uses, and protects data. See the Couchbase Política de privacidade for full details on data handling across all products and services.
Couchbase manages platform security, infrastructure, and compliance controls. Customers are responsible for some initial configuration and ongoing security administration.