Certifications and compliance
Teradata reduces risk and simplifies security in a complex and evolving regulatory environment.
Global certifications
Teradata follows all guidelines and seeks certifications where available.
FISC
FISC security guidelines enable financial institutions to use cloud services that meet security standards and protect data and customers.
GxP
GxP guidelines ensure the safety, efficacy, and integrity of pharmaceuticals, medical devices, clinical trials, and food industries.
HIPAA
HIPAA requires U.S. healthcare providers and organizations to protect patient health information from unauthorized use and disclosure.
HITRUST
HITRUST compliance enables organizations to protect sensitive health information and demonstrate adherence to HIPAA and other regulations.
IRAP
IRAP validates that organizations meet security requirements of the Australian government for handling sensitive data.
ISO/IEC 27001
ISO/IEC 27001 sets requirements for protecting sensitive or confidential information.
ISO 27017
ISO 27017 provides guidelines about information security controls for cloud service providers and customers.
PCI DSS
PCI DSS sets rules for secure management of credit card data to protect cardholders' identities and privacy.
SOC 1 Type II
SOC 1 audits verify Teradata’s internal controls over financial reporting (ICFR).
SOC 2 Type II
SOC 2 audits verify Teradata’s security and privacy controls.
TX-RAMP
TX-RAMP requires cloud service providers to undergo security assessments and certifications before offering services to Texas state agencies and higher education institutions.
VPAT
VPAT assesses software product accessibility for people with disabilities.
Global compliance
Teradata adheres to various international and regional privacy laws, including the following:
GDPR
The GDPR, the EU's data privacy law, governs collection, processing, storage, and transfer of personal data.
LGPD
General Protection Data Law (LGPD) regulates the processing of personal data in the Federative Republic of Brazil.
CCPA
California Consumer Privacy Act (CCPA) enforces data privacy rights for consumers in California.
PIPEDA
Personal Information Protection and Electronic Document Act (PIPEDA) is a law for how private-sector organizations collect, use, and disclose personal information in for-profit, commercial activities with and across Canada.