Skip to main content
For our current certifications, security controls and subprocessors, see the Upstash Trust Center.

​
Is Upstash SOC 2 Compliant?

Yes. Upstash has a SOC 2 Type II report. SOC 2 controls apply across the platform, and the report is available to databases with the Prod Pack add-on and to Enterprise customers. You can request it through the Trust Center.

​
Is Upstash ISO 27001 Compliant?

We are in the process of getting this certification. Contact us (support@upstash.com) to learn about the expected date.

​
Is Upstash GDPR Compliant?

Yes. For more information, see our Privacy Policy and Data Processing Agreement. We acquire DPAs from each subcontractor that we work with. Upstash also participates in the Data Privacy Framework (DPF).

​
Is Upstash HIPAA Compliant?

Yes. Upstash Redis is HIPAA compliant and you can use it to store and process Protected Health Information (PHI). A Business Associate Agreement (BAA) and HIPAA enablement are available with the Enterprise plan. See Managing Healthcare Data for your responsibilities, and contact us (support@upstash.com) to get started.

​
Is Upstash PCI Compliant?

Upstash does not store personal credit card information. We use Stripe for payment processing. Stripe is a certified PCI Service Provider Level 1, which is the highest level of certification in the payments industry.

​
Does Upstash conduct vulnerability scanning and penetration tests?

Yes, we use third party tools and work with pen testers. We share the results with Enterprise customers. Contact us (support@upstash.com) for more information.

​
Does Upstash take backups?

Yes. We take regular snapshots of the data cluster for disaster recovery. You can also create backups of your own databases, schedule daily backups and restore them. See Backup/Restore. Hourly backups with custom retention are available for Enterprise customers.

​
Does Upstash encrypt data?

Yes. TLS is always enabled on Upstash Redis databases, so data in transit between your client and the database is encrypted. Encryption at rest is available with the Prod Pack add-on and included in the Enterprise plan. See Security.