The Render platform is fully compliant with the following security frameworks:

| Regulation / Framework | Description |
| --- | --- |
| **SOC 2 Type 2** | Validates an organization's security controls and their operational effectiveness via annual third-party audit. |
| **ISO 27001** | Defines a global standard of requirements for information security management systems (ISMS). |

In addition, Render supports [**HIPAA-enabled workspaces**](/content/docs/hipaa-compliance/index.html) for organizations that process and store US health data.

Render also maintains its own security policy and complies with the General Data Protection Regulation (GDPR).

## View compliance documentation

**Some compliance documents require a [Pro workspace plan](/content/docs/platform-features-by-plan/index.html) or higher.**

Certificates, attestations, and other security policy documents are available from the [Document Center](https://dashboard.render.com/documents) in the Render Dashboard:

Open the Document Center by visiting [dashboard.render.com/documents](https://dashboard.render.com/documents) or by clicking **Compliance and documents** in the top-right corner of the dashboard:

### Provided documents

**All workspaces** can access the following documents:

- SOC 3 report
- GDPR DPA

**Pro workspaces and higher** can access the following documents, which also require signing a non-disclosure agreement (NDA):

- SOC 2 Type 2 report
- ISO 27001 certificate
- Render security policy

###### [Render Platform Compliance and Certifications](/content/docs/certifications-compliance/index.html)

- [View compliance documentation](/content/docs/certifications-compliance#view-compliance-documentation/index.html)
  - [Provided documents](/content/docs/certifications-compliance#provided-documents/index.html)