REGULATORY COMPLIANCE
Rest Assured, We've Got You Covered
Wasabi meets or exceeds all major industry compliance standards and government regulations.
Wasabi third-party compliance
Our storage technology is deployed in top tier data centers certified for SOC 2, ISO 27001, and PCI-DSS.
HIPAA
Health Insurance Portability and Accountability Act (HIPAA)
Wasabi stores protected health information (PHI) and electronic protected health information (ePHI) in accordance with HIPAA and the Health Information Technology for Economic and Clinical Health Act (HITECH)—as administered by the U.S. Department of Health and Human Services (HHS). Wasabi uses security best practices and technologies to ensure physical security of its facilities and to maintain the privacy and integrity of electronic data and digital records.
CJIS
Criminal Justice Information Services (CJIS)
With Wasabi, you can store data compliantly with standards set for data privacy, security, durability, and protection for Criminal Justice Information (CJI) and other critical information, as required by CJIS, a division of the U.S. Federal Bureau of Investigation (FBI).
FERPA
Family Educational Rights and Privacy Act (FERPA)
Wasabi cloud storage allows educational institutions to comply with the mandated requirements of FERPA, which imposes specific technical and administrative requirements for education IT planners, InfoSec organizations, and compliance officers who receive any aid from the U.S. Department of Education.
GDPR & UK GDPR
EU & UK General Data and Protection Regulation (GDPR)
Store and maintain personal data in compliance with the GDPR mandates for both the European Union (EU) and United Kingdom (UK). The laws impose strict data privacy and security rules for businesses and IT service providers, with significant potential for fines for violations.
TPN
Trusted Partner Network (TPN)
The Trusted Partner Network is a global media and entertainment community network and security initiative operated by the Motion Picture Association (MPA).
Wasabi is Blue Sheild certified and we continue to pursue all certifications necessary to remain compliant for organizations with varying multi-media and motion picture assets and requirements.
We work with the [re]DESIGN Group to manage audits and assessments to maintain TPN status.
SEC
U.S. Securities and Exchange Commission (SEC) & Securities and Exchange Act (SEA)
Effective on May 1, 2023, the SEC, SEA's updated rules require that third-party record-keeping services provide an undertaking letter to its customer organizations. Contact us to request an SEC alternate undertaking letter per 17 CFR 240.17a 4(i)(1)(ii)(A).