Elasticsearch Service is now HIPAA-ready, with the ability to enter a BAA across Azure, GCP, and AWS for your healthcare and PHI data use cases.

We are pleased to announce that we now offer a HIPAA-compliant business associate agreement (BAA) for our HIPAA-secure Elasticsearch Service.&nbsp;
HIPAA (or the Health Insurance Portability and Accountability Act of 1996) is United States legislation that provides data privacy and security provisions for safeguarding medical information. The HIPAA rules apply to “covered entities” that handle data that is protected health information (PHI), such as insurance companies or doctors' offices, and extend to business associates like Elastic who process PHI on behalf of such covered entities.&nbsp;
This new milestone allows users who are subject to the HIPAA rules to leverage <a href="/products/elasticsearch/service">Elasticsearch Service</a> and its rich feature sets to process, manage, and store PHI. To make Elasticsearch Service easier for users looking to bring rich search capabilities to PHI data, our recognition of HIPAA compliance and ability to enter BAAs extend&nbsp;across Azure, GCP, and AWS <a href="/guide/en/cloud/current/ec-reference-regions.html">across all regions</a> and <a href="/products/elasticsearch/service/pricing">subscription tiers</a>.
New to the Elasticsearch Service? Get started with a <a href="/cloud/elasticsearch-service/signup?elektra=hipaa-announcement-blog">14-day trial</a> today — all you need is an email address.
To learn more about our HIPAA-ready solution or our BAA, please contact your Elastic sales representative or reach out through <a href="/contact">our contact page</a>.

hipaa-announcement-blog-banner.png

hipaa-announcement-blog-thumb.png

Announcing Elasticsearch Service with HIPAA compliance

We’re happy to announce our certification for compliance with ISO/IEC 27001:2013, 27017:2015, and 27018:2019 and completion of CSA STAR certification.

Today we are happy to announce Elastic's certification for compliance with ISO/IEC 27001:2013, 27017:2015, and 27018:2019 as well as completion of Cloud Security Alliance (CSA) Security Trust and Risk (STAR) certification. These certifications, performed by independent third-party auditors, are evidence of our commitment to information security and privacy at every level of our organization, and that the Elastic security program is operating in accordance with industry-leading best practices.
In addition to the ISO 27001 certification with 27017 and 27018 attestations, we have also completed the Cloud Security Alliance (CSA) Security Trust and Risk (STAR) certification across Elasticsearch Service, App Search, and Site Search.
<h2>ISO 27001</h2>ISO 27001:2013 is a security management standard that specifies security management best practices and comprehensive security controls following the ISO/IEC 27002 best practice guidance.
The basis of this certification is the development and implementation of a rigorous security program, which includes an Information Security Management System (ISMS). This system defines how Elastic continually manages security by:
<ul><li>Systematically evaluating our information security risks, taking into account the impact of threats and vulnerabilities</li><li>Designing and implementing a comprehensive suite of information security controls to address Elastic’s and our customers’ hosted information security risks</li></ul><h2>ISO 27017</h2>ISO/IEC 27017:2015 provides requirements for information security controls applicable to the provision and use of cloud services by providing:
<ul><li>Additional implementation guidance for relevant controls specified in ISO/IEC 27002</li><li>Additional controls with implementation guidance that specifically relate to cloud services</li></ul><h2>ISO 27018</h2>ISO/IEC 27018:2019 provides assurance that cloud service providers, like Elastic, who process personally identifiable information (PII) offer suitable information security controls to protect the privacy of their customers by securing PII entrusted to them.
<h2>CSA STAR</h2>The CSA STAR Certification is a rigorous third-party independent assessment of the security of a cloud service provider. The technology-neutral certification leverages the requirements of the ISO/IEC 27001:2013 management system standard together with the CSA Cloud Controls Matrix.
For more information, refer to our <a href="/security-and-compliance">Security and Compliance webpage</a>.

cloud_banner.jpg

new-elastic-cloud-console.jpg

Announcing new ISO and CSA STAR certifications for Elastic Cloud

Start free trial

Blog Footer CTA

Sign up for Elastic Cloud free trial

Savanna Myer

By submitting you acknowledge that you've read and agree to our <a href="/legal/elastic-cloud-account-terms" target="_self">Terms of Service</a>, and you agree to receive the <a href="/legal/privacy-statement#how-we-use-the-information" target="_self">selected communications</a> at the contact details you provided above. See <a href="/legal/privacy-statement/" target="_self">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Communication Preferences - ONLY for /communication-preferences

Durch das Absenden erklären Sie, dass Sie unsere <a href="/de/legal/elastic-cloud-account-terms" target="_self">Nutzungsbedingungen</a> gelesen haben und mit ihnen einverstanden sind und dass Sie Elastic erlauben, <a href="/de/legal/privacy-statement#how-we-use-the-information" target="_self">ausgewählte Nachrichten und Informationen</a> an die oben von Ihnen bereitgestellten Kontaktangaben zu senden. Weitere Informationen, darunter auch dazu, wie Sie Ihre Einwilligung zurückziehen können, finden Sie in der <a href="/de/legal/privacy-statement/" target="_self">Datenschutzerklärung von Elastic</a>.

By submitting you acknowledge that you've read and agree to our <a href="/legal/serverless-preview-terms" target="_blank">Terms of Service</a>, and that Elastic may <a href="/legal/privacy-statement#how-we-use-the-information" target="_blank">contact you</a> about our related products and services, using the details you provide above. See <a href="/legal/privacy-statement/" target="_blank">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Serverless GDPR Text

Durch das Absenden erklären Sie, dass Sie unsere <a href="/de/legal/serverless-preview-terms" target="_self">Nutzungsbedingungen</a> gelesen haben und mit ihnen einverstanden sind und dass Sie Elastic erlauben, bezüglich unserer zugehörigen Produkte und Dienstleistungen und unter Nutzung der von Ihnen oben bereitgestellten Kontaktangaben <a href="/de/legal/privacy-statement#how-we-use-the-information" target="_self">mit Ihnen in Kontakt zu treten</a>. Weitere Informationen, darunter auch dazu, wie Sie Ihre Einwilligung zurückziehen können, finden Sie in der <a href="/de/legal/privacy-statement/" target="_self">Datenschutzerklärung von Elastic</a>.

By submitting you agree to <a href="/agreements/global/cloud-services-monthly" rel="nofollow">Elastic Cloud Terms of Service</a>. Your personal data will be processed in accordance with <a href="/legal/privacy-statement">Elastic's Privacy Statement</a>.

Cloud Trial GDPR Text

Beim Absenden akzeptieren Sie die <a href="/de/agreements/global/cloud-services-monthly" rel="nofollow">Nutzungsbedingungen von Elastic Cloud</a>. Die Verarbeitung Ihrer personenbezogenen Daten unterliegt der <a href="/de/legal/privacy-statement">Datenschutzerklärung von Elastic</a>.

By submitting you acknowledge that you've read and agree to our <a href="/legal/terms-of-use" target="_blank">Terms of Service</a>, and that Elastic may <a href="/legal/privacy-statement#how-we-use-the-information" target="_blank">contact you</a> about our related products and services, using the details you provide above. See <a href="/legal/privacy-statement/" target="_blank">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Newsletter GDPR Text

Durch das Absenden erklären Sie, dass Sie unsere <a href="/de/legal/terms-of-use" target="_self">Nutzungsbedingungen</a> gelesen haben und mit ihnen einverstanden sind und dass Sie Elastic erlauben, bezüglich unserer zugehörigen Produkte und Dienstleistungen und unter Nutzung der von Ihnen oben bereitgestellten Kontaktangaben <a href="/de/legal/privacy-statement#how-we-use-the-information" target="_self">mit Ihnen in Kontakt zu treten</a>. Weitere Informationen, darunter auch dazu, wie Sie Ihre Einwilligung zurückziehen können, finden Sie in der <a href="/de/legal/privacy-statement/" target="_self">Datenschutzerklärung von Elastic</a>.

Explore similar demos

Overview

Speakers

Close

See more insights

The content on this page is not available in the selected language. As Elastic grows globally, we continue to support content in multiple languages.

The content on this page is not available in the selected language.

Der Inhalt dieser Seite ist in der ausgewählten Sprache nicht verfügbar. Wir bei Elastic arbeiten daran, die bereitgestellten Inhalte in verschiedenen Sprachen anzubieten. Bis dahin bitten wir Sie um etwas Geduld und hoffen auf Ihr Verständnis!

Author

Watch now (no PT)

Watch now

See all top stories

All (no PT translation)

Contact information

Press Release

Share on Reddit

Articles by

Share this story

Share by Email

Thank you for your interest!

Contact Info

Follow us on Youtube

Load More

Share on LinkedIn

Follow us on LinkedIn

Search Integrations

All Solutions

Video for

Follow us on Twitter

See when this webinar starts in my time zone

Register to Watch

Register now

See All Posts

Can't make it? Register and we'll send you the recording. You'll also receive an email with related content

Sie können nicht dabei sein? Registrieren Sie sich, damit wir Ihnen die Aufzeichnung zukommen lassen können. Außerdem erhalten Sie eine E‑Mail mit Begleitmaterial.

Small image for

On-demand webinar

Featured webinar

Register to Attend

Share on Facebook

Reset all

Upcoming webinar

View more posts

Print

Hosted by

Sign In to Attend

View next

Follow us on Facebook

Share

Highlights

Learn More

Read less

You'll also receive an email with related content

Wir schicken Ihnen zudem relevante Informationen, die von Interesse sein könnten.

Thank you for registering. We will send you a confirmation email soon.

Vielen Dank für Ihre Registrierung. Sie erhalten in Kürze eine Bestätigungs-E‑Mail von uns.

Author

Articles by Savanna Myer

Announcing Elasticsearch Service with HIPAA compliance

Announcing new ISO and CSA STAR certifications for Elastic Cloud

Sign up for Elastic Cloud free trial