Protecting Personal Data in the Cloud

For cloud customers:

• Confidence that their personal data is handled with internationally recognized privacy and security controls.
• Easier vendor due diligence and regulatory compliance (e.g., GDPR).
• Greater transparency and contractual assurance about how personal data is processed and protected.

For cloud service providers:

• Clear guidance for managing and protecting PII in public cloud environments.
• Demonstrates commitment to privacy, building customer trust and competitive advantage.
• Supports compliance with global data protection laws and regulations.

ISO/IEC 27018 aligns closely with privacy principles found in the GDPR and other major regulations.

It addresses critical requirements such as data subject consent, breach notification, transparency, data minimization, and the rights of individuals.

While certification to ISO/IEC 27018 does not guarantee GDPR compliance, it provides strong assurance that a cloud provider follows best practices for protecting personal data.

Yes. Our ISO/IEC 27018 certificate and related audit documentation are available via the Exoscale Compliance Center. Additional privacy and compliance documentation can be provided to customers on request or under NDA.