Elasticsearch Service is now HIPAA-ready, with the ability to enter a BAA across Azure, GCP, and AWS for your healthcare and PHI data use cases.

We are pleased to announce that we now offer a HIPAA-compliant business associate agreement (BAA) for our HIPAA-secure Elasticsearch Service.&nbsp;
HIPAA (or the Health Insurance Portability and Accountability Act of 1996) is United States legislation that provides data privacy and security provisions for safeguarding medical information. The HIPAA rules apply to “covered entities” that handle data that is protected health information (PHI), such as insurance companies or doctors' offices, and extend to business associates like Elastic who process PHI on behalf of such covered entities.&nbsp;
This new milestone allows users who are subject to the HIPAA rules to leverage <a href="/products/elasticsearch/service">Elasticsearch Service</a> and its rich feature sets to process, manage, and store PHI. To make Elasticsearch Service easier for users looking to bring rich search capabilities to PHI data, our recognition of HIPAA compliance and ability to enter BAAs extend&nbsp;across Azure, GCP, and AWS <a href="/guide/en/cloud/current/ec-reference-regions.html">across all regions</a> and <a href="/products/elasticsearch/service/pricing">subscription tiers</a>.
New to the Elasticsearch Service? Get started with a <a href="/cloud/elasticsearch-service/signup?elektra=hipaa-announcement-blog">14-day trial</a> today — all you need is an email address.
To learn more about our HIPAA-ready solution or our BAA, please contact your Elastic sales representative or reach out through <a href="/contact">our contact page</a>.

hipaa-announcement-blog-banner.png

hipaa-announcement-blog-thumb.png

Announcing Elasticsearch Service with HIPAA compliance

We’re happy to announce our certification for compliance with ISO/IEC 27001:2013, 27017:2015, and 27018:2019 and completion of CSA STAR certification.

Today we are happy to announce Elastic's certification for compliance with ISO/IEC 27001:2013, 27017:2015, and 27018:2019 as well as completion of Cloud Security Alliance (CSA) Security Trust and Risk (STAR) certification. These certifications, performed by independent third-party auditors, are evidence of our commitment to information security and privacy at every level of our organization, and that the Elastic security program is operating in accordance with industry-leading best practices.
In addition to the ISO 27001 certification with 27017 and 27018 attestations, we have also completed the Cloud Security Alliance (CSA) Security Trust and Risk (STAR) certification across Elasticsearch Service, App Search, and Site Search.
<h2>ISO 27001</h2>ISO 27001:2013 is a security management standard that specifies security management best practices and comprehensive security controls following the ISO/IEC 27002 best practice guidance.
The basis of this certification is the development and implementation of a rigorous security program, which includes an Information Security Management System (ISMS). This system defines how Elastic continually manages security by:
<ul><li>Systematically evaluating our information security risks, taking into account the impact of threats and vulnerabilities</li><li>Designing and implementing a comprehensive suite of information security controls to address Elastic’s and our customers’ hosted information security risks</li></ul><h2>ISO 27017</h2>ISO/IEC 27017:2015 provides requirements for information security controls applicable to the provision and use of cloud services by providing:
<ul><li>Additional implementation guidance for relevant controls specified in ISO/IEC 27002</li><li>Additional controls with implementation guidance that specifically relate to cloud services</li></ul><h2>ISO 27018</h2>ISO/IEC 27018:2019 provides assurance that cloud service providers, like Elastic, who process personally identifiable information (PII) offer suitable information security controls to protect the privacy of their customers by securing PII entrusted to them.
<h2>CSA STAR</h2>The CSA STAR Certification is a rigorous third-party independent assessment of the security of a cloud service provider. The technology-neutral certification leverages the requirements of the ISO/IEC 27001:2013 management system standard together with the CSA Cloud Controls Matrix.
For more information, refer to our <a href="/security-and-compliance">Security and Compliance webpage</a>.

cloud_banner.jpg

new-elastic-cloud-console.jpg

Announcing new ISO and CSA STAR certifications for Elastic Cloud

Start free trial

Blog Footer CTA

Sign up for Elastic Cloud free trial

Savanna Myer

The content on this page is not available in the selected language. As Elastic grows globally, we continue to support content in multiple languages.

The content on this page is not available in the selected language.

O conteúdo desta página não está disponível no idioma selecionado. A Elastic está trabalhando para garantir que o conteúdo esteja disponível em vários idiomas. Agradecemos a compreensão.

By submitting you acknowledge that you've read and agree to our <a href="/legal/elastic-cloud-account-terms" target="_self">Terms of Service</a>, and you agree to receive the <a href="/legal/privacy-statement#how-we-use-the-information" target="_self">selected communications</a> at the contact details you provided above. See <a href="/legal/privacy-statement/" target="_self">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Communication Preferences - ONLY for /communication-preferences

Ao enviar a confirmação, você reconhece que leu e concorda com nossos <a href="/pt/legal/elastic-cloud-account-terms" target="_self">Termos de Serviço</a> e também concorda em receber <a href="/pt/legal/privacy-statement#how-we-use-the-information" target="_self">comunicações especiais</a> por meio dos dados de contato que forneceu acima. Consulte a <a href="/pt/legal/privacy-statement/" target="_self">Declaração de Privacidade da Elastic</a> para saber mais detalhes ou para cancelar a qualquer momento.

By submitting you acknowledge that you've read and agree to our <a href="/legal/serverless-preview-terms" target="_blank">Terms of Service</a>, and that Elastic may <a href="/legal/privacy-statement#how-we-use-the-information" target="_blank">contact you</a> about our related products and services, using the details you provide above. See <a href="/legal/privacy-statement/" target="_blank">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Serverless GDPR Text

Ao enviar a confirmação, você reconhece que leu e concorda com nossos <a href="/pt/legal/serverless-preview-terms" target="_self">Termos de Serviço</a> e que a Elastic pode <a href="/pt/legal/privacy-statement#how-we-use-the-information" target="_self">entrar em contato com você</a> para divulgar nossos produtos e serviços relacionados usando os dados que você forneceu acima. Consulte a <a href="/pt/legal/privacy-statement/" target="_self">Declaração de Privacidade da Elastic</a> para saber mais detalhes ou para cancelar a qualquer momento.

By submitting you agree to <a href="/agreements/global/cloud-services-monthly" rel="nofollow">Elastic Cloud Terms of Service</a>. Your personal data will be processed in accordance with <a href="/legal/privacy-statement">Elastic's Privacy Statement</a>.

Cloud Trial GDPR Text

Ao enviar, você concorda com os <a href="/pt/agreements/global/cloud-services-monthly" rel="nofollow">Termos de Serviço do Elastic Cloud</a>. Seus dados pessoais serão tratados de acordo com a <a href="/pt/legal/privacy-statement">Declaração de Privacidade da Elastic</a>.

By submitting you acknowledge that you've read and agree to our <a href="/legal/terms-of-use" target="_blank">Terms of Service</a>, and that Elastic may <a href="/legal/privacy-statement#how-we-use-the-information" target="_blank">contact you</a> about our related products and services, using the details you provide above. See <a href="/legal/privacy-statement/" target="_blank">Elastic’s Privacy Statement</a> for more details or to opt-out at any time.

Newsletter GDPR Text

Ao enviar a confirmação, você reconhece que leu e concorda com nossos <a href="/pt/legal/terms-of-use" target="_self">Termos de Serviço</a> e que a Elastic pode <a href="/pt/legal/privacy-statement#how-we-use-the-information" target="_self">entrar em contato com você</a> para divulgar nossos produtos e serviços relacionados usando os dados que você forneceu acima. Consulte a <a href="/pt/legal/privacy-statement/" target="_self">Declaração de Privacidade da Elastic</a> para saber mais detalhes ou para cancelar a qualquer momento.

Explore similar demos

Explore outras demonstrações semelhantes

Overview

Load More

Speakers

Close

See more insights

Author

Articles by

Learn more

Watch now (no PT)

Watch now

See all top stories

All (no PT translation)

Contact information

Press Release

Share on Reddit

Share this story

Share by Email

Thank you for your interest!

Contact Info

Follow us on Youtube

Share on LinkedIn

Follow us on LinkedIn

Search Integrations

All Solutions

Video for

Follow us on Twitter

See when this webinar starts in my time zone

Consultar a hora de início do webinar no meu fuso horário

Register to Watch

Register now

See All Posts

Can't make it? Register and we'll send you the recording. You'll also receive an email with related content

Não vai conseguir participar? Inscreva-se e nós lhe enviaremos a gravação. Você também receberá um email com conteúdo relacionado.

Author

Articles by Savanna Myer

Announcing Elasticsearch Service with HIPAA compliance

Announcing new ISO and CSA STAR certifications for Elastic Cloud

Sign up for Elastic Cloud free trial